CVE-2026-12396

The WP Job Portal WordPress plugin, in versions prior to 2.5.5 , is vulnerable to unauthorized actions due to a lack of capability or ownership checks . This flaw allows authenticated users with a subscriber-level (self-registerable) account to perform job moderation actions, such as approving, f...

PT-2026-59404

Summary Open WebUI v0.9.5 lets an authenticated user attach arbitrary file id values to their own chat message without checking whether they own or can read those files. If the attacker then shares that chat and grants themselves read access, has access to file treats the victim file as accessibl...

CVE-2025-15400 OpenPix <= 2.13.3 - Subscriber+ Payment Gateway Settings Reset

The OpenPix for WooCommerce WordPress plugin through 2.13.3 allows any authenticated user to trigger AJAX actions that reset payment gateway configuration options without capability or nonce checks. This permits any authenticated users, such as subscribers to clear API credentials and webhook...

Linux Distros Unpatched Vulnerability : CVE-2024-46715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - driver: iio: add missing checks on iioinfo's callback access Some callbacks from iioinfo structure are accessed without any check, so if a driver doesn't...