CVE-2026-32580

Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...

CVE-2026-32557

Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...

CVE-2026-32570

Unauthenticated Cross Site Scripting XSS in Progressify - Progressive Web App PWA = 1.6.0 versions...

CVE-2026-32572

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-105070

Unauthenticated Privilege Escalation in Salon booking system = 10.31.7 versions...

CVE-2026-105071

Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning = 1.5.17 versions...

CVE-2026-105061

Unauthenticated Cross Site Scripting XSS in WP Mailster = 1.9.0.0 versions...

CVE-2026-104670

Unauthenticated Cross Site Scripting XSS in LearnPress = 4.4.9 versions...

CVE-2026-104406

Unauthenticated Broken Access Control in picu = 3.10.1 versions...

CVE-2026-104405

Unauthenticated Privilege Escalation in GiveWP = 4.17.0 versions...

CVE-2026-104672

Unauthenticated Cross Site Scripting XSS in GiveWP = 4.17.0 versions...

CVE-2026-104747

Unauthenticated PHP Object Injection in Haaken = 1.5 versions...

CVE-2026-104814

Unauthenticated Cross Site Scripting XSS in Form Block = 1.8.1 versions...

CVE-2026-104394

Unauthenticated Cross Site Scripting XSS in Charitable = 1.8.12.3 versions...

CVE-2026-104395

Unauthenticated Cross Site Scripting XSS in picu = 3.10.1 versions...

CVE-2026-102387

Unauthenticated Sensitive Data Exposure in Xserver Migrator = 1.6.6 versions...

CVE-2026-100518

Unauthenticated Broken Authentication in Advanced Google reCAPTCHA = 5.40 versions...

Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to IBM Java SDK (CVE-2026-61308, CVE-2026-70907 & CVE-2026-60589)

Summary IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to IBM Java SDK. Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. While the vulnerabilit...

CVE-2026-98365

The Linux kernel is vulnerable to an integer overflow in the mr_check_range() function within the RDMA/rxe component. The vulnerability exists because the function uses wraparound-prone arithmetic to validate that the iova and length fall within the registered Memory Region (MR) range. An unauthe...

CVE-2026-98190 wifi: wilc1000: fix out-of-bounds read in P2P public action frames

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...