News & Sicurezza

CVE ID :CVE-2026-53683 Published : Sept. 2, 2026, 9:16 a.m. | 1 hour, 59 minutes ago Description :reset_password.html parses query string parameters and uses the 'url' parameter as a redirection target (window.location = url) after password reset, optionally delayed by a 'delay' parameter. No validation or allowlisting is performed on url, enabling an attacker to redirect users to an arbitrary external site after completion of the password-reset workflow. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Google dicht Chrome-lekken die remote code execution mogelijk maken Google heeft beveiligingsupdates uitgebracht voor kritieke kwetsbaarheden in Chrome die remote code execution mogelijk maken. Een aanvaller kan zo code op de systemen van gebruikers uitvoeren, waarbij ... Read more Published Date: Sep 02, 2026 (3 days, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-84353 CVE-2026-84352

The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires an administrator to perform the plugin's standard dismiss-and-recheck workflow on a link submitted by the attacker via the WordPress comment author URL field, after which the attacker's HTTP server issues a redirect to a URL containing an HTML/JavaScript payload that is stored verbatim in the link log.

CVE ID :CVE-2026-75528 Published : Sept. 2, 2026, 8:16 a.m. | 2 hours, 58 minutes ago Description :The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires an administrator to perform the plugin's standard dismiss-and-recheck workflow on a link submitted by the attacker via the WordPress comment author URL field, after which the attacker's HTTP server issues a redirect to a URL containing an HTML/JavaScript payload that is stored verbatim in the link log. Severity: 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-23588 Published : Sept. 2, 2026, 8:16 a.m. | 2 hours, 59 minutes ago Description :Rejected reason: Withdrawn by requester. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-23590 Published : Sept. 2, 2026, 8:16 a.m. | 2 hours, 59 minutes ago Description :Rejected reason: Withdrawn by requester. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-23589 Published : Sept. 2, 2026, 8:16 a.m. | 2 hours, 59 minutes ago Description :Rejected reason: Withdrawn by requester. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-23587 Published : Sept. 2, 2026, 8:16 a.m. | 2 hours, 59 minutes ago Description :Rejected reason: Withdrawn by requester. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-23584 Published : Sept. 2, 2026, 8:16 a.m. | 2 hours, 59 minutes ago Description :Rejected reason: Withdrawn by requester. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-23591 Published : Sept. 2, 2026, 8:16 a.m. | 2 hours, 59 minutes ago Description :Rejected reason: Withdrawn by requester. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-23586 Published : Sept. 2, 2026, 8:16 a.m. | 2 hours, 59 minutes ago Description :Rejected reason: Withdrawn by requester. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-23585 Published : Sept. 2, 2026, 8:16 a.m. | 2 hours, 59 minutes ago Description :Rejected reason: Withdrawn by requester. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...