CVE-2026-14919

ShopMonitor.io WordPress plugin before 1.2.0 is vulnerable: its test mode for email routing is gated by a trusted-source check that can be satisfied with client-supplied headers, allowing unauthenticated attackers to redirect outgoing emails (including the WordPress administrator password-reset) ...

Brave Desktop 1.69.153 Security Fixes

Implemented process hardening for the Brave VPN services on Windows. - Implemented a trusted source check for "Elevator::InstallVPNServices". - Updated code to use JSON serialization to escape all unsafe symbols in SpeedReader. - Limited extension features to allow listed extensions. Upgraded...