CVE-2026-73532

CVE-2026-73532 affects Fluent Forms Pro 6.2.7. A tampered plugin build from a decommissioned update server inserted a rogue file (libs/class-license-sync.php) loaded via require_once in fluentformpro.php, creating a backdoor REST API and persisting PHP files in mu-plugins and uploads. It also ins...

CVE-2026-73533

Ninja Tables Pro 5.2.11 contains embedded malicious code introduced via a tampered plugin build served from a decommissioned update server. The rogue file app/Library/updater/NinjaTableDataSync.php creates a backdoor REST API endpoint, drops persistent PHP files in mu-plugins and uploads director...

CVE-2026-66443

CVE-2026-66443 affects the WordPress REST API Log plugin, specifically versions

CVE-2026-66441

CVE-2026-66441 affects WordPress MultiVendorX plugin versions up to 5.0.10, with unauthenticated broken access control. The available sources identify the affected product and the vulnerability class but do not provide a confirmed patch version or remediation steps. CVSS v3.1 base score 7.5 (HIGH...

CVE-2022-50997

The CVE-2022-50997 entry concerns Weaver (Fanwei) E-cology 8.0 and 9.0, where a SQL injection vulnerability exists in the HrmCareerApplyPerView.jsp endpoint. An unauthenticated attacker can manipulate the id parameter (via a crafted GET request) to perform UNION-based injections against a Microso...

CVE-2026-20349

The CVE-2026-20349 issue affects Cisco Secure Firewall ASA/FTD Remote Access SSL VPN, caused by insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can send a crafted HTTP request to the VPN service and cause the device to reload, triggering a denial-of-...

CVE-2026-68820

CVE-2026-68820 is a local privilege escalation caused by a use-after-free in the Windows Ancillary Function Driver for WinSock (afd.sys). The vulnerability allows an attacker with code execution on the target to elevate to SYSTEM, as described in NVD/NVD-derived entries and echoed by Krebs/Automo...

CVE-2026-58231

Technical details about CVE-2026-58231 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-72898

Metabase is affected by CVE-2026-72898: an unauthenticated attacker can inject arbitrary SQL through the /reset_password endpoint, forging an administrator session and gaining full access to the Metabase instance. The root cause, as described in PoC materials, is that the password-reset API accep...

CVE-2026-65400

CVE-2026-65400 affects macOS Screen Sharing. Root cause: insufficient state management during authentication, enabling a network attacker to authenticate without valid credentials. Impact: attacker on the network could gain Screen Sharing access. Remediation: patched in macOS Sequoia 15.7.9, macO...

CVE-2026-66665

CVE-2026-66665 affects the WordPress Type Hub plugin (versions

CVE-2026-28139

CVE-2026-28139 concerns the WordPress plugin Ajax Search Lite (vulnerable: ≤ 4.14.4). The issue is an unauthenticated PHP Object Injection in the plugin’s handling of objects, as described in CVE details and corroborated by multiple feeds. Affected component: the Ajax Search Lite plugin; root cau...

CVE-2026-15459

The CVE-2026-15459 entry concerns the WordPress WPMU DEV Dashboard plugin (≤ 5.0.0). Public details show an authentication bypass allowing unauthenticated attackers to perform privileged Hub actions, including installing/activating plugins from attacker URLs (remote code execution), deleting plug...

CVE-2026-18577

CVE-2026-18577 concerns an authentication bypass in N-able N-central resulting from an incomplete patch for CVE-2026-18556. Affected builds include versions through 2026.3.1, with N-able releasing hotfix 2026.3.1.7 to address the issue. Multiple connected sources note that attackers could gain re...

CVE-2026-18556

Summary of findings : CVE-2026-18556 is an authentication bypass in N-able N-central (through 2026.1), later followed by CVE-2026-18577 describing an incomplete patch that enables the same class of vulnerability. Attacks reportedly gained remote admin access and, via Take Control, reached custome...

CVE-2026-16144

The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is affected by a Remote Code Execution vulnerability up to version 2.4.20. The flaw resides in the _save_data function where insufficient validation of the thisPermalink field allows attacker-controlled strings to overwrit...

CVE-2026-59310

CVE-2026-59310 is a VMware vCenter directory-traversal vulnerability in the Syslog server that, with network access, could allow an attacker to execute arbitrary code. The connected documents confirm: (1) root cause is directory traversal in the Syslog service, enabling code execution on vulnerab...

CVE-2026-67595

VaahCMS versions 2.0.0–2.3.4 contain a malicious obfuscated JavaScript payload embedded in the security-otp.blade.php template used to render security OTP emails. The payload can run in any browser that renders the affected email with JavaScript enabled and establishes a WebSocket connection to a...

CVE-2026-20316

Cisco Secure Firewall Management Center (FMC) Software is affected by CVE-2026-20316 due to static credentials in the web interface, enabling an unauthenticated, remote attacker with a low-privileged account to log in and access sensitive data. Root cause: hard-coded/static credentials for a low-...

CVE-2026-65884

CVE-2026-65884 affects Joomla Extension Gridbox < 2.20.2 by Balbooa. The issue is in the registration method, which allows users with provided usergroup IDs to create new accounts with administrative permissions, enabling unauthenticated account creation with high privileges. Public references...