@vevedh/bke-dsi-cacem (>=2.0.4 <=4.0.1), bke-dsi-cacem (>=0.0.1 <=2.0.4) potentially affected by CVE-2026-29793 via @feathersjs/mongodb (>=5.0.11 <=5.0.12)

@feathersjs/mongodb NPM version =5.0.11, =2.0.4, =0.0.1, =2.0.4 Source cves: CVE-2026-29793 Source advisory: SNYK:JS-FEATHERSJSMONGODB-15456216...

WordPress LatePoint plugin <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection vulnerability

Unauthenticated Arbitrary User Password Change via SQL Injection vulnerability discovered by István Márton in WordPress Plugin LatePoint versions = 5.0.11...