CVE-2026-93509 Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer Amount

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snapshot taken before crediting the recipient, allowing an authenticated attacker with Subscriber-level access to mint...

CVE-2026-105190 Easy Digital Downloads < 3.7.1 - Unauthenticated Account Creation with Registration Disabled

The Easy Digital Downloads WordPress plugin before 3.7.1 does not consult the site's user registration setting before creating a WordPress account, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled. The created account receives...

CVE-2026-104671 TutorStarter < 4.0.4 - Unauthenticated User Registration Bypass via AJAX

The TutorStarter WordPress theme before 4.0.4 does not respect the site's user registration setting in one of its AJAX registration handlers, allowing unauthenticated visitors to create WordPress user accounts even when user registration is disabled...

CVE-2026-103517 Airwallex Online Payments Gateway < 1.36.0 - Unauthenticated Payment Bypass via Forged Webhook

The Airwallex Online Payments Gateway WordPress plugin before 1.36.0 does not verify that an incoming payment notification genuinely comes from the payment provider when no webhook secret has been configured, allowing unauthenticated attackers to forge one and mark orders as paid without paying...

CVE-2026-107510

An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation...

CVE-2026-107503

Unvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account takeover via injected OIDC authority in Ditto Explorer in Eclipse Ditto Ditto Explorer 3.6.0,3.9.7 allows a craft link set an attacker-controlled OIDC authority with autoSso enabled. The UI then...

CVE-2026-105110

The Iskratel Innbox GPON ONT devices are vulnerable to OS Command Injection in the login.xgi CGI endpoint . This vulnerability allows an unauthenticated remote attacker to execute arbitrary commands with root privileges by exploiting the CLI parameter . The impact is critical, potentially leading...

CVE-2026-4894

Multiple products from Frappe Technologies , specifically Frappe Cloud/ERPNext , are vulnerable to an authentication bypass due to insufficient validation in the authentication process. An unauthenticated remote attacker can manipulate the email field in the /api/method/press.api.account.signup e...

CVE-2026-71896

Apache DolphinScheduler versions before 3.4.3 are vulnerable to an authorization vulnerability (CWE-863) affecting the /dolphinscheduler/users/list-all endpoint. The root cause is a failure to enforce necessary permission checks, allowing authenticated users to retrieve account information belong...

CVE-2026-71895

An authorization vulnerability in Apache DolphinScheduler (versions 3.2.0 before 3.4.3 ) allows authenticated non-admin users to retrieve Kubernetes configuration data meant for administrators. This exposure includes kubeconfig credentials, which may allow unauthorized users to authenticate direc...

CVE-2026-71183

Apache DolphinScheduler versions before 3.4.3 are vulnerable to an authorization flaw where authenticated users can bypass access controls to view sensitive data source information. The /unauth-datasource and /authed-datasource endpoints fail to enforce proper permissions, potentially exposing co...

CVE-2026-66087

An authorization bypass vulnerability in Apache DolphinScheduler (versions prior to 3.4.3 ) allows authenticated users to perform unauthorized operations on task instances. Specifically, attackers can access the /stop and /savepoint endpoints for projects they are not authorized to view. The root...

CVE-2026-66084

Apache DolphinScheduler versions before 3.4.3 are vulnerable to an authorization bypass via the /dolphinscheduler/projects/{projectCode}/task-definition/{code}/with-upstream endpoint. The application fails to verify if the task definition code belongs to the specified project code. Consequently, ...

CVE-2026-66082

Apache DolphinScheduler versions before 3.4.3 are vulnerable to a cross-project authorization bypass in the API. The root cause is that affected endpoints check permissions against a supplied projectCode but fail to verify if the target resource actually belongs to that project. An authenticated ...

CVE-2026-89191

SQLView KRIS is vulnerable to a Stored Cross-Site Scripting (XSS) flaw within its Workflow Template feature. The root cause is the lack of server-side sanitisation for the "template name" field, which is subsequently rendered in "onclick" attributes on the main dashboard. An attacker with adminis...

CVE-2026-12260

The NetBoard CRM demo platform is vulnerable to a SQL injection flaw in the ‘user-name’ POST parameter of the ‘/module/auth/recovery.php’ endpoint. The vulnerability allows for blind attacks using Boolean, error, time-based, and UNION techniques. Successful exploitation enables an attacker to ext...

CVE-2026-107466

A flaw in flatpak-builder allows for information disclosure by bypassing directory confinement checks. An attacker can craft a build manifest containing local file Uniform Resource Identifiers (URIs) within source download definitions. When a user or a continuous integration (CI) system processes...

CVE-2026-93699

An argument injection vulnerability in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server. The root cause is identified as Improper Neutralization of Argument Delimiters in a Command (CWE-88) . The impact includes high severity for confidential...

CVE-2026-87428

In Brocade ASCG versions prior to 3.5.0 , a local unauthorized user on the ASCG VM can exploit a vulnerability to extract stored management credentials for onboarded SANnav instances. By issuing a request to the SANnav host network namespace , an attacker can obtain these credentials to compromis...

CVE-2026-87426

Brocade ASCG versions prior to 3.5.0 are vulnerable to an unauthenticated network-based attack. An attacker can query specific internal management endpoints, specifically the showSwitchHandler , to enumerate configuration details and the state of managed Brocade Fabric OS (FOS) switches. This vul...

CVE-2026-87425

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0 . By providing an unauthorized Certificate Authority (CA) certificate to an unauthenticated management interface, an attacker can force the system to trust illegitimate certificates. Thi...

CVE-2026-87424

A vulnerability exists in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 . The issue stems from the use of a hard-coded cryptographic key , which allows an attacker to bypass authentication across deployments. The vulnerability is addressed in ASCG version 3....

CVE-2026-85490

Brocade ASCG versions prior to 3.5.0 are vulnerable to an arbitrary file write via a path traversal flaw. The application fails to sanitize path traversal sequences within support bundle archives ingested from remote compromised endpoints before extraction. An unauthenticated remote attacker who ...

CVE-2026-85097

The Bricksforge plugin for WordPress (versions up to and including 3.1.8.9 ) is vulnerable to an unauthenticated arbitrary file upload flaw. The root cause is insufficient validation of the attacker-controlled URL field within the 'temporaryFileUploads' parameter during form submission. An unauth...

CVE-2026-85489

An authentication flaw in the Brocade ASCG administrative management service component allows unauthenticated network users to issue direct API requests. This vulnerability enables attackers to perform privileged actions, such as accessing sensitive system configuration mapping data , modifying m...

CVE-2026-85488

Brocade ASCG versions prior to 3.5.0 are susceptible to a hardcoded credential exposure. A well-known Brocade default password is embedded within a script distributed to every customer. A local authenticated user with read access to the installation path can discover these credentials. If default...

CVE-2026-85487

A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0 . An unauthenticated attacker located on the local network can send manipulated API requests to the service endpoint to bypass path restrictions. This flaw could lead to arbitrary file read, ...

CVE-2026-85486

Brocade ASCG versions prior to 3.5.0 are vulnerable to Remote Code Execution (RCE) due to improper input processing. The software evaluates form data before performing necessary validation. An authenticated user with basic access can submit a configuration form containing crafted input , which th...

CVE-2026-85423

A vulnerability exists in the data collection service of Brocade ASCG versions prior to 3.5.0 . An API endpoint within the data collector service lacks proper authentication or authorization checks for incoming requests. An attacker with network access can exploit this to instruct the application...

CVE-2026-85422

A vulnerability in Brocade ASCG version before 3.5.0 allows an attacker to obtain a static cryptographic key hardcoded into the software binaries. This key is used to secure sensitive data at rest and protect inter-node communication protocols. An attacker successfully extracting this key can dec...

CVE-2026-85421

A critical security vulnerability exists in Brocade ASCG versions prior to 3.5.0 . The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can exploit this flaw to issue control commands, modify syst...

CVE-2026-5769

A vulnerability exists in Brocade SANnav versions prior to 3.0.1 where the Brocade Fabric OS switch admin password may be captured in plaintext within a memory swap file. This occurs when the SANnav server experiences an Out Of Memory (OOM) condition. An authenticated admin user with access to th...

CVE-2026-94258

The SMS Alert WordPress plugin (versions 3.6.4 - 4.0.0 ) is vulnerable to a billing phone disclosure flaw due to insufficient authorization checks during Bulk User Actions . On a WordPress multisite network , an administrator from one site can retrieve the stored billing phone numbers of users fr...

CVE-2026-94275

The Track Orders for WooCommerce WordPress plugin, in versions prior to 1.2.7 , is vulnerable to an unauthenticated PII disclosure . The root cause is a failure to verify order ownership before returning billing details. An unauthenticated attacker can exploit this by supplying a customer's email...

CVE-2026-94246

The Wallet System for WooCommerce WordPress plugin (versions 2.0.0 through 2.7.10) is vulnerable to an Insecure Direct Object Reference (IDOR) flaw. The plugin fails to verify that a wallet account named in a withdrawal submission actually belongs to the authenticated user initiating the request....

CVE-2026-94244

The Wallet System for WooCommerce WordPress plugin (versions before 2.8.0 ) contains a vulnerability that allows for store-wide wallet transaction disclosure. The root cause is a lack of capability checks and the reliance on a token that any authenticated user can obtain from a front-end page. An...

CVE-2026-86828

The BackWPup WordPress plugin, prior to version 5.7.7 , is vulnerable to a path traversal flaw during the backup restore process. When the plugin's fallback archive library is utilized, it fails to properly restrict the destination path of extracted files. This oversight allows high-privileged us...

CVE-2026-94245

The Wallet System for WooCommerce WordPress plugin (versions 2.0.0 - 2.7.10 ) contains an Insecure Direct Object Reference (IDOR) vulnerability. The root cause is a failure to verify that the user initiating a wallet transfer actually owns the wallet being debited. This allows any authenticated u...

CVE-2026-86827

The BackWPup WordPress plugin (versions 3.3 - 5.7.6 ) is vulnerable to unauthenticated backup job execution via wp-cron.php. The root cause is a failure to verify that requests to its cron-triggered backup execution handler originate from WordPress's internal scheduled-event dispatch. This allows...

CVE-2026-105198

The LatePoint Appointment Booking plugin for WordPress (versions before 5.7.3 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . The application fails to verify ownership of an order when rendering its confirmation summary. An unauthenticated visitor can retrieve sensitive Personally...

CVE-2026-86826

The BackWPup WordPress plugin before version 5.7.7 is vulnerable to an unauthenticated sensitive data disclosure . The flaw exists because the plugin fails to properly restrict web access to the working directory used during backup restores. On webservers that do not honor .htaccess rules, such a...

CVE-2026-105196

The LatePoint (Appointment Booking Plugin) for WordPress before version 5.6.9 contains a vulnerability where several AI Abilities API actions lack per-record authorization. This flaw allows an authenticated user with the LatePoint Agent role to bypass intended restrictions and perform cross-agent...

CVE-2026-105260

The Database Addon For WPForms (wpforms entries) WordPress plugin, in versions before 1.1.1 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is the failure to verify the CSRF nonce when the field is omitted, combined with a lack of internal capability checks. This all...

CVE-2026-105197

The Appointment Booking Plugin for WordPress, version before 5.6.5 , is vulnerable to an Insecure Direct Object Reference (IDOR) . The plugin fails to verify if a backend staff user is authorized to delete a specific record. This allows an authenticated user with a record-scoped staff role to irr...

CVE-2026-105194

The Easy Digital Downloads WordPress plugin, prior to version 3.7.1 , contains a vulnerability where block order data is not restricted to the current user. This allows users with subscriber-level access to view other customers' recent order products and obtain signed download links . Consequentl...

CVE-2026-105195

The Booking Calendar WordPress plugin, in versions before 11.8.3 , is vulnerable to an Arbitrary Option Disclosure flaw. The root cause is an inadequate restriction within one of the plugin's settings handlers , which allows users with the Editor role or higher to load and disclose the values of ...

CVE-2026-105193

The Booking Calendar WordPress plugin (versions before 11.8 ) is vulnerable to unauthenticated booking information disclosure and modification. The root cause is the use of low-entropy time-seeded values to generate per-booking access hashes. An unauthenticated attacker who can determine a bookin...

CVE-2026-104646

The Image Photo Gallery Final Tiles Grid WordPress plugin, versions prior to 3.6.14 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the lack of sanitization for several gallery configuration values that can be overridden via the gallery shortcode before being rendered in ...

CVE-2026-104645

The Image Photo Gallery Final Tiles Grid WordPress plugin, in versions prior to 3.6.14 , is vulnerable to IDOR due to insufficient authorization checks on gallery and image management actions. The root cause is that the plugin either omits ownership checks or validates ownership against an incorr...

CVE-2026-103646

The Ultimate Multisite WordPress plugin versions before 2.17.0 is vulnerable to an unauthenticated authentication bypass via the email_address parameter. The flaw exists because the plugin fails to require authentication when linking a logged-out checkout to an existing WordPress account. Due to ...