Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownUser Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart TagOct 16, 2026
- UnknownUser Registration & Membership <= 5.2.8 - Cross-Site Request Forgery to trigger_bulk_action()Oct 16, 2026
- UnknownUser Registration & Membership <= 5.2.8 - Unauthenticated Stored Cross-Site Scripting via Checkbox Field ValueOct 16, 2026
- UnknownWP Booking System <= 2.1.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'wpbs_action=email_logs' ActionOct 16, 2026
- UnknownThemify Builder <= 7.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'visible' Shortcode AttributeOct 16, 2026
- UnknownLearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' ParameterOct 16, 2026
- UnknownLearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX ActionOct 16, 2026
- UnknownAppointment Booking Plugin <= 5.7.4 - Unauthenticated Sensitive Information Disclosure via ORM Operator Injection in 'customer[uuid]' ParameterOct 16, 2026
- UnknownKirki <= 6.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Context Smuggling via 'context' ParameterOct 16, 2026
- UnknownHippoo Mobile App for WooCommerce <= 1.12.0 - Reflected Cross-Site Scripting via 'token_id' ParameterOct 16, 2026
- UnknownKirki <= 6.3.2 - Authenticated (Administrator+) PHP Object Injection via Deserialization of Untrusted Input via ZIP Template ImportOct 16, 2026
- UnknownMalicious code in @xatancchii/natabaileys (npm)Oct 16, 2026
- UnknownMalicious code in parxleys (npm)Oct 16, 2026
- High7.5Important: rpcbind security updateOct 16, 2026
- High7.8Important: ghostscript security updateOct 16, 2026
- High8.1Important: kernel security, bug fix, and enhancement updateOct 16, 2026
- High7.5Important: rpcbind security updateOct 16, 2026
- High7.8Important: ghostscript security updateOct 16, 2026
- High8.6Important: libsoup security updateOct 16, 2026
- High8.8Important: kernel security updateOct 16, 2026
- High8.8Important: hplip security, bug fix, and enhancement updateOct 16, 2026
- High8.8Important: kernel-rt security, bug fix, and enhancement updateOct 16, 2026
- Medium6.5Moderate: wireshark security updateOct 16, 2026
- High7.5Important: rpcbind security updateOct 16, 2026
- High7.5Important: lrzsz security, bug fix, and enhancement updateOct 16, 2026