CVE-2026-57424

CVE-2026-57424 affects the WordPress plugin Razorpay Payment Links for WooCommerce (rzp-woocommerce). Multiple sources describe a Missing Authorization / Broken Access Control vulnerability in versions up to and including 2.1.4, allowing exploitation of improperly configured access control. Conne...

CVE-2026-57391 WordPress Loops & Logic plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tangible Loops & Logic tangible-loops-and-logic allows Stored XSS.This issue affects Loops & Logic: from n/a through = 4.2.3...

CVE-2026-57379 WordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through = 2.15.3...

CVE-2026-57829

creationtimestamp| type| source ---|---|--- 2026-07-13 08:27:08+00:00| seen| https://bsky.app/profile/suriq.io/post/3mqjbhlhal325 2026-07-13 08:30:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjboanlg72i 2026-07-13 09:55:28+00:00| seen|...

CLEANSTART-2026-NM99858 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

MAL-2026-10374 Malicious code in sixseven2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27752f42df81ff26081065ce5bf64d59fa477dfbed72d1afbd359bffd3ab52df The package declares no install/postinstall/preinstall lifecycle scripts, and its declared main is sw.js — a browser ServiceWorker that uses...

CLEANSTART-2026-LM78105 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-11964

Affected software: User Registration & Membership WordPress plugin (prior to 5.2.2). Vulnerability: The plugin does not verify the authenticity of incoming payment-provider webhook notifications, enabling unauthenticated attackers to forge a payment-approved event. Impact: This can activate a pai...

CVE-2026-7162

creationtimestamp| type| source ---|---|--- 2026-07-13 05:00:18+00:00| seen| https://bsky.app/profile/potato.software/post/3mqivvr66wf2l 2026-07-13 05:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqivvqbkwr2w 2026-07-13 07:21:40+00:00| seen|...

CVE-2026-15522

creationtimestamp| type| source ---|---|--- 2026-07-13 03:28:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqiqseevj52c 2026-07-13 03:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiqz75lmn2x 2026-07-13 21:03:37+00:00| seen|...

CVE-2026-15524

creationtimestamp| type| source ---|---|--- 2026-07-13 03:28:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqiqreyjsq26 2026-07-13 03:36:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiramtlks2w...

CVE-2026-15521

creationtimestamp| type| source ---|---|--- 2026-07-13 02:28:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqinfvtqii2f 2026-07-13 03:58:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqishukvj72t...

CVE-2026-15520

creationtimestamp| type| source ---|---|--- 2026-07-13 02:27:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqinf24bau2a 2026-07-13 03:54:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqisa6y6cx2q 2026-07-17 14:00:06+00:00| published-proof-of-concept|...

CVE-2026-15522

A security flaw has been discovered in tugcantopaloglu godot-mcp 2.0.0. Affected by this vulnerability is the function validatePath of the file build/index.js of the component runproject. The manipulation of the argument projectPath results in path traversal. Attacking locally is a requirement. T...

CVE-2026-15516

creationtimestamp| type| source ---|---|--- 2026-07-13 01:31:58+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqikbabw3d23 2026-07-13 01:32:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqikbcff2j2i 2026-07-13 03:44:27+00:00| seen|...

PT-2026-57771

Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Object Injection.This issue affects RT-Theme 18 | Extensions: from n/a through = 2.5...

CVE-2026-51541

OpENer 2.3.0 commit 76b95cf has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size. An attacker can send a valid ENIP SendRRData frame carrying a very short CIP payload whose pathsize field claims that many more path words are...

vim security update

8.0.1763-27.0.1 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-27 - RHEL-186656 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave - RHEL-186648 CVE-2026-52858 vim: possible code execution wi...

ROS-20260713-73-0028

The vulnerability of the crc32combine64 and crc32combinegen64 functions in the open-source data compression library zlib relates to the fact that the x2nmodp function may perform right shifts within a loop without a termination condition. Exploiting this vulnerability could allow an attacker to...

Security update for xwayland (important)

openSUSE security update: security update for xwayland ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21283-1 Rating: important References: bsc1268893 bsc1268894 Cross-References: CVE-2026-55999 CVE-2026-56000 CVSS scores: CVE-2026-55999 SUSE : 7...