News & Sicurezza

CVE ID :CVE-2026-81806 Published : Sept. 8, 2026, 8:17 a.m. | 1 hour, 13 minutes ago Description :Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery. This issue affects Hide My WP Ghost: from n/a through 7.0.09. Severity: 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Adobe publiceert noodpatch wegens aanvallen op webwinkels Adobe heeft noodpatches uitgebracht voor een actief aangevallen kwetsbaarheid in webwinkelsoftware Magento en Adobe Commerce. Via het beveiligingslek kan een aanvaller code op de server van de webshop ... Read more Published Date: Sep 08, 2026 (2 days, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-75650

CVE ID :CVE-2026-81790 Published : Sept. 8, 2026, 7:20 a.m. | 10 minutes ago Description :Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Csomagpontok és szállítási címkék WooCommerce-hez: from n/a before 4.2.8. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-81798 Published : Sept. 8, 2026, 7:18 a.m. | 12 minutes ago Description :Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Appointments allows DOM-Based XSS. This issue affects Easy Appointments: from n/a through 4.0.2.1. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-84817 Published : Sept. 8, 2026, 8:17 a.m. | 1 hour, 13 minutes ago Description :Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-84818 Published : Sept. 8, 2026, 8:17 a.m. | 1 hour, 13 minutes ago Description :Unauthenticated Cross Site Scripting (XSS) in Open User Map Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-81802 Published : Sept. 8, 2026, 7:15 a.m. | 14 minutes ago Description :Unauthenticated Insecure Direct Object References (IDOR) in WpEvently Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-84820 Published : Sept. 8, 2026, 8:17 a.m. | 1 hour, 13 minutes ago Description :Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-81792 Published : Sept. 8, 2026, 7:15 a.m. | 14 minutes ago Description :Unauthenticated Privilege Escalation in Product Catalog Enquiry for WooCommerce by MultiVendorX Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86519 Published : Sept. 8, 2026, 5:16 a.m. | 2 hours, 14 minutes ago Description :A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /card_activation.sql of the component Backup File Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been made public and could be used. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86518 Published : Sept. 8, 2026, 4:17 a.m. | 3 hours, 13 minutes ago Description :A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file /edit.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86517 Published : Sept. 8, 2026, 4:17 a.m. | 3 hours, 13 minutes ago Description :A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query of the file /pages/us_searchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...