PT-2026-81063

Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...

PT-2026-80807

Unauthenticated Cross Site Scripting XSS in Social Media & Share Icons = 2.9.9 versions...

PT-2026-80831

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

PT-2026-80836

Name of the Vulnerable Software and Affected Versions Woo Essential versions prior to 4.3.1 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database...

PT-2026-80195

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

PT-2026-80194

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

PT-2026-80196

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

PT-2026-81051

Name of the Vulnerable Software and Affected Versions Booking Hub versions 1.3.0 and earlier Description An issue exists that allows a user with Subscriber privileges to escalate their privileges within the system. Recommendations Update Booking Hub to a version later than 1.3.0...

PT-2026-80810

Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...

PT-2026-81058

Name of the Vulnerable Software and Affected Versions The Events Calendar versions prior to 6.17.3 Description An unauthenticated PHP Object Injection issue exists. PHP Object Injection occurs when untrusted input is passed to the PHP unserialize function, potentially allowing an attacker to...

PT-2026-81057

Name of the Vulnerable Software and Affected Versions Toolset Blocks versions 1.6.26 and earlier Description Unauthenticated Cross-Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Toolset Blocks to...

PT-2026-80811

Author SQL Injection in FluentCRM Pro = 3.1.12 versions...

PT-2026-80815

Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...

PT-2026-80828

Unauthenticated Cross Site Scripting XSS in Tourmaster = 5.4.9 versions...

firefox security update

140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.14.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.14.0-1 - Update to 140.14.0 ESR...

PT-2026-80825

Name of the Vulnerable Software and Affected Versions Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More versions prior to 1.7.2 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions...

PT-2026-80816

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

PT-2026-81050

Name of the Vulnerable Software and Affected Versions MagicAI for WordPress versions 1.4 and earlier Description A Local File Inclusion issue exists that allows users with Subscriber privileges to read arbitrary files on the server. Recommendations Update MagicAI for WordPress to a version later...

EUVD-2026-65146

OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...

PT-2026-81056

Name of the Vulnerable Software and Affected Versions Event Tickets versions 5.29.2.1 and earlier Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Event Tickets to...