WordPress LifePress plugin <= 2.2.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Doan Dinh Van in WordPress Plugin LifePress versions = 2.2.1...

PT-2026-4027

Name of the Vulnerable Software and Affected Versions Nelio AB Testing versions through 8.1.8 Description A code injection issue exists in Nelio AB Testing. The issue allows for improper control of code generation. Recommendations Update Nelio AB Testing to a version later than 8.1.8...

PT-2026-4147

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes DiveIt diveit allows PHP Local File Inclusion.This issue affects DiveIt: from n/a through = 1.4.3...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57798)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57798 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/dpmst: Ensure mstprimary pointer is...

PT-2026-4036

Name of the Vulnerable Software and Affected Versions wpeverest User Registration versions through 4.4.6 Description An issue exists in wpeverest User Registration related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows...

PT-2026-4187

Incorrect Privilege Assignment vulnerability in e-plugins Final User final-user allows Privilege Escalation.This issue affects Final User: from n/a through = 1.2.5...

PT-2026-3994

Name of the Vulnerable Software and Affected Versions SEOSEON EUROPE S.L Affiliate Link Tracker versions through 0.2 Description The Affiliate Link Tracker software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. Thi...

PT-2026-4035

Name of the Vulnerable Software and Affected Versions TangibleWP MyHome Core versions through 4.1.0 Description A flaw exists in TangibleWP MyHome Core that allows for PHP Local File Inclusion due to improper control of filename for include/require statements. This issue is related to a PHP Remot...

PT-2026-3979

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Amuli amuli allows PHP Local File Inclusion.This issue affects Amuli: from n/a through = 2.3.0...

PT-2026-3974

Name of the Vulnerable Software and Affected Versions ApusTheme Drone versions through 1.40 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to Reflected Cross-Site Scripting XSS. This allows an attacker to inject...

PT-2026-4190

Unrestricted Upload of File with Dangerous Type vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Upload a Web Shell to a Web Server.This issue affects Xpro Elementor Addons: from n/a through = 1.4.19.1...

WordPress Plugin HTML5 Video Player Cross-Site Script Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. The WordPre...

PT-2026-3985

Name of the Vulnerable Software and Affected Versions flexostudio flexo-posts-manager versions through 1.0001 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, which can lead to Reflected Cross-site Scripting XSS. This allows an...

PT-2026-3991

Name of the Vulnerable Software and Affected Versions Electron versions through 1.8.2 Description An authorization issue exists in Ninetheme Electron, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a version of Electron newer than 1.8.2...

PT-2026-4217

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Fiorello fiorello allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fiorello: from n/a through = 1.0...

PT-2026-4006

Name of the Vulnerable Software and Affected Versions Searcher for Elementor versions through 1.0.3 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. Recommendations Update Searcher for Elementor to a version later than...

PT-2026-3992

Name of the Vulnerable Software and Affected Versions blazethemes Blogmatic versions through 1.0.3 Description The software contains a flaw related to unrestricted file uploads, allowing potentially dangerous file types to be uploaded. There is no information about the number of potentially...

PT-2026-4025

Name of the Vulnerable Software and Affected Versions Peach Payments Gateway versions n/a through 3.3.6 Description A missing authorization issue exists in the Peach Payments Gateway. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized acces...

PT-2026-4157

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes TanTum tantum allows PHP Local File Inclusion.This issue affects TanTum: from n/a through = 1.1.13...

PT-2026-4012

Name of the Vulnerable Software and Affected Versions merkulove Crumber versions through 1.0.10 Description An authorization issue exists in merkulove Crumber crumber-elementor due to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendation...