News & Sicurezza

CVE ID :CVE-2026-95601 Published : Sept. 23, 2026, 6:14 p.m. | 30 minutes ago Description :Unauthenticated SQL Injection in Product Filter by WBW Severity: 9.3 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-95600 Published : Sept. 23, 2026, 6:14 p.m. | 30 minutes ago Description :Unauthenticated Sensitive Data Exposure in TrustedLogin Connector Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-95592 Published : Sept. 23, 2026, 6:14 p.m. | 30 minutes ago Description :Unauthenticated Insecure Direct Object References (IDOR) in Team Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-95593 Published : Sept. 23, 2026, 6:14 p.m. | 30 minutes ago Description :Editor SQL Injection in Ultimeter Severity: 7.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-95590 Published : Sept. 23, 2026, 6:14 p.m. | 30 minutes ago Description :Subscriber SQL Injection in Tainacan Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-95586 Published : Sept. 23, 2026, 6:14 p.m. | 30 minutes ago Description :Contributor Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-95529 Published : Sept. 23, 2026, 6:14 p.m. | 30 minutes ago Description :Unauthenticated Cross Site Scripting (XSS) in Calculated Fields Form Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-95530 Published : Sept. 23, 2026, 6:14 p.m. | 30 minutes ago Description :Subscriber Cross Site Scripting (XSS) in PixelYourSite – Your smart PIXEL (TAG) Manager Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-95528 Published : Sept. 23, 2026, 6:14 p.m. | 30 minutes ago Description :Unauthenticated Cross Site Scripting (XSS) in Core Web Vitals & PageSpeed Booster Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-95527 Published : Sept. 23, 2026, 6:14 p.m. | 30 minutes ago Description :Unauthenticated Broken Access Control in Conekta Payment Gateway Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

orval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanStack Query mutator options metadata objects. Attackers can inject arbitrary JavaScript code through a crafted operationId in an OpenAPI specification that executes when generated hooks are called.

orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart property names in generated template literals. Attackers can inject ${...} expressions into OpenAPI schema property names that execute as live interpolation when the generated client builds FormData bodies with consumer process privileges.