PT-2026-116383

The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mmdwqzpoxadd' parameter in all versions up to, and including, 2.8.61 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2026-117126

These are all security issues fixed in the crun-1.30.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-117125

These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.5.2git0.1c496ed-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-116501

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration vulnerability because userpassword.Compare substitutes a placeholder hash derived from the string "hunter2" when a stored password hash is empty. Unauthenticated attackers can...

PT-2026-116467

phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows FAQ editors to store executable SVG files. Attackers can split script tags around removed tokens like processing instructions so single-pass removal reassembles them,...

PT-2026-116477

phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database endpoint, which executes database migrations without validating a CSRF token. Attackers can lure a logged-in user with the CONFIGURATION EDIT permission into submitting a crafted...

PT-2026-116493

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.83.0 Description An issue exists where unauthenticated attackers can cause a denial of service by exhausting server memory. This is achieved by sending small, highly compressed request bodies using the Content-Encodin...

PT-2026-117131

These are all security issues fixed in the pocketbase-0.40.5-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-116492

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.89.0 Description An unbounded recursion issue exists in the Apple MDM enrollment property list parsing. Unauthenticated attackers can crash the server by sending a crafted binary plist payload of approximately 150 byt...

PT-2026-116472

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 4.2.0-alpha through 4.2.0-beta Description An authorization bypass exists in the isFaqAccessibleForUser function, which incorrectly treats missing FAQ translations as visible to unauthenticated users. By sending a mismatched...

PT-2026-116496

Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl allow rule of coderd/rbac/policy.rego, which does not verify organization membership for per-user ACL entries, and organization member removal does not scrub those entries. Authenticated users removed from...

PT-2026-116497

Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows authenticated provisioner daemons to download other organizations' cached Terraform module archives. Attackers with an org-scoped provisioner key and a...

PT-2026-116502

Name of the Vulnerable Software and Affected Versions Coder versions prior to 2.34.7 Description An IP spoofing issue exists in the ExtractRealIPAddress middleware. The system incorrectly trusts the leftmost value provided by the client in the X-Forwarded-For header rather than the client IP...

PT-2026-116451

Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after OIDC token expiry when no refresh token is issued. Users can keep their APIKey cookie active through regular use, extending it every 24 hours to access Coder indefinitely...

PT-2026-116454

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 3.2.0-alpha through 4.1.8 phpMyFAQ versions 4.2.0-alpha through 4.2.0-alpha Description An authentication bypass exists that allows users authenticated via an Identity Provider IdP to skip Time-based One-Time Password TOTP...

PT-2026-116371

Name of the Vulnerable Software and Affected Versions ACF Frontend Admin by DynamiApps versions prior to 3.29.14 Description The plugin fails to perform a capability check on a form-submission action before writing submitted values into the global ACF options store. This allows unauthenticated...

PT-2026-117129

These are all security issues fixed in the kernel-devel-7.2.11-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-116351

Name of the Vulnerable Software and Affected Versions EU VAT Assistant for WooCommerce versions prior to 2.1.30.260414 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique where malicious scripts ar...

PT-2026-116498

Name of the Vulnerable Software and Affected Versions Coder versions 2.26.0 through 2.34.7 Description An incorrect authorization flaw exists where the system only verifies workspace read access before fetching group members using an elevated system context. Authenticated users with workspace use...

PT-2026-116197

Name of the Vulnerable Software and Affected Versions Kirki – Freeform Page Builder, Website Builder & Customizer versions prior to 6.3.3 Description An Insecure Direct Object Reference exists due to missing validation on a user-controlled key. Unauthenticated attackers can expose sensitive profi...

PT-2026-117567

CVE ID :CVE-2026-105391 Published : Oct. 17, 2026, 10:19 p.m. | 1 hour, 1 minute ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2026-117323

CVE ID :CVE-2026-106549 Published : Oct. 16, 2026, 10:19 p.m. | 56 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2026-117679

CVE ID :CVE-2026-107345 Published : Oct. 17, 2026, 10:19 p.m. | 1 hour, 1 minute ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2026-116200

Name of the Vulnerable Software and Affected Versions LatePoint versions prior to 5.7.5 Description An authentication bypass exists due to a race condition in the verifyOTP function. The issue stems from a non-atomic read-modify-write operation on the OTP verification attempts counter, where the...

PT-2026-116370

Name of the Vulnerable Software and Affected Versions WP User Manager versions prior to 2.9.20 Description An issue exists during payment-gated registration where the software fails to roll back the creation of a WordPress account if the subsequent payment step fails. This allows unauthenticated...

PT-2026-116365

Name of the Vulnerable Software and Affected Versions User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress versions prior to 5.2.9 Description Stored Cross-Site Scripting occurs du...

PT-2026-116495

Name of the Vulnerable Software and Affected Versions Coder versions prior to 2.29.20 Coder versions 2.33.0 through 2.33.11 Coder versions 2.34.0 through 2.34.7 Coder versions 2.35.0 through 2.35.3 Description An improper hostname validation flaw exists in the GetWorkspaceProxyByHostname function...

PT-2026-116198

Name of the Vulnerable Software and Affected Versions Fastcache by Host.it versions prior to 1.7.6 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with subscriber-level access or...

PT-2026-116378

Name of the Vulnerable Software and Affected Versions Rank Math SEO PRO version 3.0.123 Description A supply-chain compromise occurred where a subset of packages distributed between October 15, 2026, and October 16, 2026, contained embedded malware. This issue has been actively exploited in the...

PT-2026-116379

Name of the Vulnerable Software and Affected Versions Fancy Comments WordPress versions prior to 1.2.22 Description Improper neutralization of input during web page generation allows Reflected Cross-site Scripting XSS in the Heateor Support Fancy Comments WordPress fancy-facebook-comments...

PT-2026-116352

Name of the Vulnerable Software and Affected Versions LearnPress versions prior to 4.4.11 Description An unauthenticated attacker can perform PHP Object Injection by sending untrusted input through the checkout-email request parameter during the checkout AJAX action. The input is processed by...

PT-2026-116435

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PAYCOMET PAYCOMET for WooCommerce paytpv-for-woocommerce allows Reflected XSS.This issue affects PAYCOMET for WooCommerce: from n/a through 5.45...

PT-2026-116476

phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endpoints, which do not validate a CSRF token for the create, drop, and import actions. Attackers can lure a user with CONFIGURATION...

PT-2026-116465

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 3.2.1 through 4.1.8 phpMyFAQ versions 4.2.0-alpha through 4.2.0-alpha Description Authenticated content authors can perform stored cross-site scripting by embedding iframes with data:text/html sources within FAQ or News...

PT-2026-116456

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 4.2.0-alpha through 4.2.0-alpha Description An authorization flaw exists in the deleteGroup function of the GroupController. Authenticated administrators who possess the GROUP DELETE privilege but are not SuperAdmins can...

PT-2026-116455

phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password when changing an account e-mail in the user control panel UserController::updateData, api/user/data/update, checking only the session and CSRF token. An attacker with a hijacked session can set the e-mai...

PT-2026-116466

phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by the mutable preferred username claim and whose AuthEntraId::create ignores the duplicate-login exception while continuing with the existing local...

PT-2026-116464

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRestrictions that lets delegated administrators assign categories outside their own scope. Category-restricted administrators can POST to /admin/api/group/category-restrictions wit...

PT-2026-116394

Name of the Vulnerable Software and Affected Versions Gantry 5 Framework versions prior to 5.6.4 Description The Gantry 5 Framework allows the retrieval of embedded sensitive data through the generation of error messages that contain sensitive information. Recommendations Update Gantry 5 Framewor...

PT-2026-116453

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE MAX - 3 to Stream Zero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboard synthesize image format to bm...

PT-2026-116483

Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists despite export restrictions by requesting mode=pdfl. The groups roles export check in modules/groups-roles/lists show.php omits pdfl, which later runs the pdf export,...

PT-2026-116461

phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in UserController::updateUserRights that drops per-right language restrictions when rights are re-granted. Administrators holding USER EDIT can submit language-scoped rights to the update-rights API,...

PT-2026-116471

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticated faqs and search API endpoints. Attackers can send concurrent GET requests that load and process all database records into PHP memory, exhausting CPU and memory to crash the...

PT-2026-116463

phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user/password/update and user/password/reset endpoints. Unauthenticated attackers can send unlimited reset requests to flood a registered user's inbox with reset emails, exhausting mailer and server...

PT-2026-116459

phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking the editnews right to modify news by calling PUT /admin/api/news/update, which checks NEWS DELETE instead of NEWS EDIT. Attackers holding addnews and delnews can read the...

PT-2026-116484

Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory data.php that allows authenticated users to bypass the inventory module enabled restriction. Attackers with any valid login can request the DataTables JSON feed to read every inventory...

PT-2026-116460

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 4.1.0 through 4.1.8 phpMyFAQ versions 4.2.0-alpha through 4.2.0-alpha Description An authorization flaw in the admin dashboard allows authenticated users who lack administrative privileges to access restricted information. By...

PT-2026-116474

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows unauthenticated attackers to read hidden open questions due to an inverted api.onlyPublicQuestions check in OpenQuestionController. Attackers can send GET requests to the /api/v4.0/open-questions...

PT-2026-116473

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows users with FAQ EDIT permission to bypass sanitization using XML DTD custom entities. Attackers can upload an SVG defining an entity that expands to javascript in an anchor href,...

PT-2026-116468

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted editors to manage attachments of FAQs outside their categories by supplying arbitrary record IDs. Attackers in medium permission mode can send upload or delete requests with a...