474234 matches found
CLSA-2026-1791666662 TuxCare security update for vm2 (2 CVEs)
TuxCare rebuilt vm2 to address 2 CVEs. Fixed in 3.11.5-tuxcare.7...
CLSA-2026-1791666589 TuxCare security update for devalue (3 CVEs)
TuxCare rebuilt devalue to address 3 CVEs. Fixed in 4.3.2-tuxcare.4...
CLSA-2026-1791666488 TuxCare security update for vm2 (4 CVEs)
TuxCare rebuilt vm2 to address 4 CVEs. Fixed in 3.10.0-tuxcare.7...
CLSA-2026-1791666194 TuxCare security update for adm-zip (2 CVEs)
TuxCare rebuilt adm-zip to address 2 CVEs. Fixed in 0.5.12-tuxcare.3...
CLSA-2026-1791629281 TuxCare security update for fastify (2 CVEs)
TuxCare rebuilt fastify to address 2 CVEs. Fixed in 3.29.5-tuxcare.7...
CLSA-2026-1791629172 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.5.2-tuxcare.2...
CLSA-2026-1791629015 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.5.3-tuxcare.2...
CLSA-2026-1791626582 TuxCare security update for @modelcontextprotocol/sdk (1 CVE)
TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.30.1-tuxcare.1...
CLSA-2026-1791626432 TuxCare security update for devalue (3 CVEs)
TuxCare rebuilt devalue to address 3 CVEs. Fixed in 4.3.0-tuxcare.4...
CVE-2026-77183
The FooSales – Point of Sale POS for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes...
CVE-2026-104766
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3. This is due to the OsSettingsController::update handler iterating over attacker-supplied settings parameters...
EUVD-2026-96102
The FooSales – Point of Sale POS for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes...
CVE-2026-104766 Appointment Booking Plugin <= 5.7.3 - Authenticated (Custom+) Privilege Escalation to 'settings[default_wp_role_for_customer]' Parameter
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3. This is due to the OsSettingsController::update handler iterating over attacker-supplied settings parameters...
EUVD-2026-96090
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3. This is due to the OsSettingsController::update handler iterating over attacker-supplied settings parameters...
CVE-2026-104766
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress is vulnerable to Privilege Escalation in versions up to and including 5.7.3 . The root cause is that the OsSettingsController::update() handler iterates over attacker-supplied settings parameters without an allowlist...
CVE-2026-6723
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11. This is due to the appointment update REST API endpoint not restricting which fields can be modified by...
CVE-2026-6723
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to and including 1.6.11.11 . The root cause is an appointment update REST API endpoint that fails to restrict which fields can be modified by to...
EUVD-2026-96063
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11. This is due to the appointment update REST API endpoint not restricting which fields can be modified by...
CVE-2026-6723 Appointment Booking Calendar <= 1.6.11.11 - Incorrect Authorization to Unauthenticated Sensitive Field Modification via Appointment Public Token
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11. This is due to the appointment update REST API endpoint not restricting which fields can be modified by...
Adobe Commerce (Magento) - Remote Code Execution
Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution. id: CVE-2022-24086 info: name:...