News & Sicurezza

CVE ID :CVE-2026-78283 Published : Aug. 27, 2026, 10:16 a.m. | 1 hour, 51 minutes ago Description :Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78281 Published : Aug. 27, 2026, 10:16 a.m. | 1 hour, 51 minutes ago Description :Unauthenticated Cross Site Scripting (XSS) in CP Media Player Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78276 Published : Aug. 27, 2026, 10:16 a.m. | 1 hour, 51 minutes ago Description :Editor PHP Object Injection in Fluent Boards Pro Severity: 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78275 Published : Aug. 27, 2026, 8:59 a.m. | 1 hour, 8 minutes ago Description :Editor Arbitrary File Deletion in Fluent Boards Pro Severity: 6.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78274 Published : Aug. 27, 2026, 8:59 a.m. | 1 hour, 8 minutes ago Description :Editor Arbitrary File Upload in Fluent Boards Pro Severity: 9.1 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78273 Published : Aug. 27, 2026, 8:59 a.m. | 1 hour, 8 minutes ago Description :Subscriber Cross Site Scripting (XSS) in Fluent Boards Pro Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78271 Published : Aug. 27, 2026, 8:59 a.m. | 1 hour, 8 minutes ago Description :Editor Privilege Escalation in FluentCRM Pro Severity: 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78261 Published : Aug. 27, 2026, 8:59 a.m. | 1 hour, 8 minutes ago Description :Unauthenticated Cross Site Scripting (XSS) in Realtyna Organic IDX plugin Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Belangrijk beveiligingslek in Microsoft SharePoint misbruikt bij aanvallen donderdag 27 augustus 2026, 10:27 door Redactie, 2 reactiesLaatst bijgewerkt: Vandaag, 10:31 Een belangrijke kwetsbaarheid in Microsoft SharePoint die remote code execution (RCE) mogelijk maakt, en wa ... Read more Published Date: Aug 27, 2026 (1 day, 11 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-63520 CVE-2026-55040

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its Known Exploited Vulnerabilities (KEV) catalog, including a high-severity security vulnerability imp ... Read more Published Date: Aug 27, 2026 (1 day, 12 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-58231 CVE-2026-8452 CVE-2022-0995 CVE-2021-23758 CVE-2019-1068 CVE-2015-5287 CVE-2015-3246

CVE ID :CVE-2026-78125 Published : Aug. 27, 2026, 6:17 a.m. | 1 hour, 50 minutes ago Description :The LearnPress WordPress plugin before 4.0.3 does not perform any authorization check on one of its REST endpoints in all versions up to, and including, 4.0.2, allowing unauthenticated attackers to disclose the payment status of arbitrary orders by enumerating order identifiers. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78137 Published : Aug. 27, 2026, 6:17 a.m. | 1 hour, 50 minutes ago Description :The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its unauthenticated actions, allowing unauthenticated attackers to add a product to the cart at an arbitrary, attacker-chosen price that carries through to the checkout total when the BOGO offer feature is enabled. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...