| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-93370 | 5.3 | The Paystack WooCommerce Payment Gateway plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.8.5 via the 'key' parameter. This makes it possible for unauthenticated attackers to extract custome | 2026-11-08 19:17:43 | 2026-11-07 07:17:05 |
| CVE-2026-93779 | 6.5 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.2 via the init_routes due to missing validation on a user controlled key. This makes | 2026-11-08 19:17:43 | 2026-11-07 05:19:02 |
| CVE-2026-93754 | 9.8 | The payever – WooCommerce Gateway plugin for WordPress is vulnerable to arbitrary file upload leading to remote code execution in various versions up to, and including, 4.8.0. Three WooCommerce-API callbacks (payever_set_sandbox_api_keys, payever_tog | 2026-11-08 19:17:43 | 2026-11-07 03:17:08 |
| CVE-2026-85344 | 4.3 | The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not perform any authorization check on an AJAX action that carries out a site-wide content rewrite, so any authenticated user, including subscriber-level, can trigger a bulk modi | 2026-11-08 19:17:42 | 2026-11-08 06:17:05 |
| CVE-2026-87112 | 8.8 | The QA Assistants – Driven by data plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.3.0 via the 'dlevent_ver' parameter. This is due to unrestricted PHP deserialization via wrap_unserialize_static() c | 2026-11-08 19:17:42 | 2026-11-07 07:17:05 |
| CVE-2026-87964 | 7.2 | The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 8.0.26. This is due to insufficient sanitization of the ` | 2026-11-08 19:17:42 | 2026-11-06 10:16:38 |
| CVE-2026-86596 | 9.8 | The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <= 260927 via the 'item_name' parameter parameter. This is due to insufficient sanitization in strip_php_tags_deep(), which only strips lit | 2026-11-08 19:17:42 | 2026-11-02 22:17:23 |
| CVE-2026-84237 | 3.1 | IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory. | 2026-11-08 19:17:41 | 2026-11-08 19:17:41 |
| CVE-2026-81542 | 6.4 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to delete arbitrary files due to path traversal. | 2026-11-08 19:17:41 | 2026-11-08 19:17:41 |
| CVE-2026-77153 | 4.8 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to obtain sensitive information from the Host-Based Printer Subsystem due to no authorization check. A bad actor could use this vulnerability to print files they should not be | 2026-11-08 19:17:40 | 2026-11-08 19:17:40 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: