CVE-2026-7617

The SecuforOAuth plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to disconnect the WordPress...

PT-2023-19956 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 8.0.1 Description: PrestaShop is an open source e-commerce web application that is vulnerable to cross-site request forgery CSRF. When authenticating users, PrestaShop preserves session attributes, which does not...