News & Sicurezza

Critical cPanel Auth Bypass CVE-2026-41940 Exploited by Thousands In the world of Linux server operations and virtual hosting management, cPanel & WHM is a cornerstone technology. However, that cornerstone is currently under a massive, global assault. Security resea ... Read more Published Date: May 12, 2026 (21 hours, 4 minutes ago) Vulnerabilities has been mentioned in this article.

The Apple macOS Security Update Review CVE-2026-28991 Accelerate An app may be able to cause a denial-of-service Yes No No CVE-2026-28988 Accounts An app may be able to bypass certain Privacy preferences Yes No No CVE-2026-28959 APFS An ap ... Read more Published Date: May 12, 2026 (19 hours, 20 minutes ago) Vulnerabilities has been mentioned in this article.

Critical “Cline” AI Agent Vulnerability Enables RCE Attacks A critical security flaw has been identified in the Cline Kanban server that allows threat actors to exfiltrate workspace data and execute arbitrary code silently and remotely. Security researcher The ... Read more Published Date: May 12, 2026 (17 hours, 23 minutes ago) Vulnerabilities has been mentioned in this article.

CVE ID :CVE-2026-45218 Published : May 12, 2026, 11:16 a.m. | 3 hours, 14 minutes ago Description :Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel wp-travel allows Blind SQL Injection.This issue affects WP Travel: from n/a through Severity: 7.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-45212 Published : May 12, 2026, 11:16 a.m. | 3 hours, 14 minutes ago Description :Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a through Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-45213 Published : May 12, 2026, 11:16 a.m. | 3 hours, 14 minutes ago Description :Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 BEAR woo-bulk-editor allows Blind SQL Injection.This issue affects BEAR: from n/a through Severity: 7.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-45214 Published : May 12, 2026, 11:16 a.m. | 3 hours, 14 minutes ago Description :Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Blind SQL Injection.This issue affects Xpro Elementor Addons: from n/a through Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-45215 Published : May 12, 2026, 11:16 a.m. | 3 hours, 14 minutes ago Description :Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-42741 Published : May 12, 2026, 11:16 a.m. | 1 hour, 14 minutes ago Description :Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend views-for-ninja-forms allows Blind SQL Injection.This issue affects Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend: from n/a through Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-45210 Published : May 12, 2026, 11:16 a.m. | 3 hours, 14 minutes ago Description :Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-42742 Published : May 12, 2026, 11:16 a.m. | 3 hours, 14 minutes ago Description :Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for WPForms views-for-wpforms-lite allows Blind SQL Injection.This issue affects Views for WPForms: from n/a through Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-45211 Published : May 12, 2026, 11:16 a.m. | 3 hours, 14 minutes ago Description :Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affects APIExperts Square for WooCommerce: from n/a through Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...