24h | 7d | 30d

CVE-2026-119075

Overview

  • themegrill
  • Registration Form for WooCommerce
07 Nov 2026
Published
07 Nov 2026
Updated
CVSS v3.1
CRITICAL (9.8)
EPSS
Pending
KEV

Description

The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list check in the FormHandler::validate_checkout_fields() function in versions up to, and including, 1.1.4 The My Account registration path (validate_fields()) validates a submitted 'tgwcfb/user-roles' value against the form's configured allowed roles, but the checkout registration path (validate_checkout_fields(), hooked to woocommerce_after_checkout_validation) stores the raw $_POST['user_roles'] value in $this->valid_data without any allow-list enforcement, and add_user_data() then injects that value into woocommerce_new_customer_data as the new account's role. This makes it possible for unauthenticated attackers to elevate their privileges to Administrator by supplying a user_roles=administrator parameter when creating an account during checkout, resulting in full site takeover.

Statistics

  • 1 Post
Last activity: 15 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

CVE-2026-119075: Registration Form for WooCommerce plugin (≤1.1.4) has a CRITICAL privilege escalation bug. Unauthenticated users can assign admin roles at checkout — full site compromise possible. Disable or restrict plugin. radar.offseq.com/threat/the-re

  • 0
  • 0
  • 0
  • 15h ago

CVE-2026-7527

Overview

  • johndarrel
  • Hide My WP Ghost – Security & Firewall
19 Sep 2026
Published
19 Sep 2026
Updated
CVSS v3.1
MEDIUM (4.7)
EPSS
0.40%
KEV

Description

The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 7.0.02. This is due to the plugin not properly validating user input. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into clicking on a specially crafted link. Exploitation requires tricking a logged-in user into clicking a crafted logout URL; the victim is fully logged out via wp_logout() before the malicious redirect is issued, making the logout irreversible as part of the attack chain.

Statistics

  • 1 Post
Last activity: 10 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-7527: Open Redirect in WP Ghost (Hide My WP Ghost) WordPress plugin, all versions up to 7.0.02. CVSS 4.7. Unauthenticated attackers can redirect users to malicious sites via crafted logout links. Patch still under review - watch for updates. valtersit.com/cve/CVE-2026-752

  • 0
  • 0
  • 0
  • 10h ago

CVE-2026-9832

Overview

  • themehigh
  • Payment Gateway of Stripe for WooCommerce
19 Sep 2026
Published
19 Sep 2026
Updated
CVSS v3.1
MEDIUM (5.3)
EPSS
0.56%
KEV

Description

The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in all versions up to, and including, 5.0.8. This is due to the publicly accessible `woocommerce_api_wt_stripe` webhook endpoint (`EH_Stripe_Webhook_Handler::handle()`) wrapping the only call to `\Stripe\Webhook::constructEvent()` inside an `if (!empty($endpoint_secret))` guard that is never entered on default installations — because the `eh_stripe_webhook_secret` option is empty after a fresh plugin install — causing the raw, attacker-controlled POST body to be decoded and processed as a fully trusted Stripe event without any signature verification, authentication, or authorization. This makes it possible for unauthenticated attackers to send forged Stripe webhook events to manipulate WooCommerce order statuses, including marking unpaid orders as paid or completed via `payment_complete()`, forcing legitimate orders into a failed state, fabricating dispute notifications, and injecting forged refund events. This vulnerability is only exploitable when the Stripe webhook signing secret has not been configured by an administrator; once a valid signing secret is saved, `\Stripe\Webhook::constructEvent()` is enforced and forged requests are rejected.

Statistics

  • 1 Post
Last activity: 13 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-9832: Stripe for WooCommerce (≤5.0.8) fails to verify webhook signatures on default installs, letting unauthenticated attackers forge events. CVSS 5.3, no patch confirmed. Update the plugin now. #CVE #infosec #WordPress valtersit.com/cve/CVE-2026-983

  • 0
  • 0
  • 0
  • 13h ago

CVE-2026-93742

Overview

  • Totolink
  • A3002MU
19 Sep 2026
Published
21 Sep 2026
Updated
CVSS v4.0
CRITICAL (9.4)
EPSS
2.27%
KEV

Description

A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of the file /boafrm/formWsc. This manipulation of the argument localPin causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Statistics

  • 1 Post
Last activity: 19 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-93742: command injection in Totolink A3002MU (formWsc, localPin arg), CVSS 9.9, remote and public exploit, no patch info. Update firmware or block the device from the internet now: #CVE #infosec #Totolink valtersit.com/cve/CVE-2026-937

  • 0
  • 0
  • 0
  • 19h ago

CVE-2026-124060

Overview

  • TOTOLINK
  • CA300-PoE
07 Nov 2026
Published
07 Nov 2026
Updated
CVSS v4.0
CRITICAL (9.4)
EPSS
Pending
KEV

Description

A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.

Statistics

  • 1 Post
Last activity: 4 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

CVE-2026-124060: CRITICAL buffer overflow in TOTOLINK CA300-PoE 6.2c.884 (CVSS 9.1) via UploadCustomModule in /cgi-bin/cstecgi.cgi. Public exploit code available — remote code execution risk. Restrict access, monitor. radar.offseq.com/threat/a-vuln

  • 0
  • 0
  • 0
  • 4h ago

CVE-2026-123957

Overview

  • TOTOLINK
  • CA300-PoE
07 Nov 2026
Published
07 Nov 2026
Updated
CVSS v4.0
CRITICAL (9.4)
EPSS
0.47%
KEV

Description

A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ipStart causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Statistics

  • 1 Post
Last activity: 19 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

TOTOLINK CA300-PoE v6.2c.884 faces CRITICAL buffer overflow (CVE-2026-123957) in setIpQosRules — remote attackers can execute code via ipStart param. Public exploit exists. Restrict access, monitor logs. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 19h ago

CVE-2026-13770

Overview

  • appmysite
  • AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker)
19 Sep 2026
Published
19 Sep 2026
Updated
CVSS v3.1
MEDIUM (6.4)
EPSS
0.35%
KEV

Description

The AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via save_ams_license_key AJAX Handler in all versions up to, and including, 3.15.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The save_ams_license_key AJAX handler performs no capability check and no nonce verification, meaning any authenticated user with Subscriber-level access or above can invoke it to store the malicious payload.

Statistics

  • 1 Post
Last activity: 16 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-13770: stored XSS in AppMySite WordPress plugin up to 3.15.3 via save_ams_license_key handler. CVSS 6.4, no patch known. Subscriber-level users can inject scripts. Restrict access or drop the plugin until fixed. #CVE #infosec #WordPress valtersit.com/cve/CVE-2026-137

  • 0
  • 0
  • 0
  • 16h ago

CVE-2026-99999

Overview

  • Linux
  • Linux
15 Oct 2026
Published
24 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.3)
EPSS
0.79%
KEV

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was discovered and reported by Paulos, and has been reporoduced by others independently since. We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum. A more complete validation at input is forthcoming, but needs more work.

Statistics

  • 1 Post
  • 8 Interactions
Last activity: 10 hours ago

Fediverse

Profile picture fallback
Erik Nygren :verified: @nygren

#Ubuntu / @ubuntu - what is up with not having fixed ubuntu.com/security/CVE-2026-9 and ubuntu.com/security/CVE-2026-9 three weeks after they were released? There's got to be some backstory here, but if there is you should be explaining and communicating effectively on it. Myself and many of my peers who have been using and recommending Ubuntu for many years are now strongly considering whether we need to re-evaluate our go-to choice for OS. Prompt patch availability for security vulnerabilities in the kernel and core OS components is table stakes for an OS distribution.

  • 4
  • 4
  • 0
  • 10h ago

CVE-2026-111560

Overview

  • Barracuda Networks
  • Barracuda Email Security Gateway (ESG)
02 Nov 2026
Published
03 Nov 2026
Updated
CVSS v4.0
HIGH (8.6)
EPSS
0.47%
KEV

Description

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently processed.

Statistics

  • 2 Posts
  • 2 Interactions
Last activity: 16 hours ago

Bluesky

Profile picture fallback
Sami Laiho @samilaiho.com
Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) labs.watchtowr.com/barracuda-ne...
  • 0
  • 2
  • 1
  • 16h ago
Showing 31 to 39 of 39 CVEs