https://radar.offseq.com/threat/vulnerability-in-drupal-payumoney-for-drupal-commerce-cve-2026-118564-597cd34fcb3be63c 2026-10-30T07:16:25.738Z weekly 0.7 https://radar.offseq.com/threat/improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-8dfb4afff2d90086 2026-10-30T07:16:23.236Z weekly 0.8 https://radar.offseq.com/threat/external-control-of-file-name-or-path-vulnerability-in-drupal-single-content-sync-allows-path-cve-2026-e42247a81b10c0dd 2026-10-30T07:16:20.288Z weekly 0.8 https://radar.offseq.com/threat/improper-verification-of-cryptographic-signature-vulnerability-in-drupal-commerce-stripe-allows-cve-cb7f827d3efc749f 2026-10-30T07:15:41.587Z weekly 0.8 https://radar.offseq.com/threat/incorrect-authorization-vulnerability-in-drupal-fasttoggle-allows-forceful-browsing-cve-2026-118569-75d38bc9c4b7a1bb 2026-10-30T07:15:38.820Z weekly 0.8 https://radar.offseq.com/threat/use-of-web-browser-cache-containing-sensitive-information-vulnerability-in-drupal-media-alias-display-a0db43a3d7321e35 2026-10-30T07:15:35.992Z weekly 0.7 https://radar.offseq.com/threat/cross-site-request-forgery-csrf-vulnerability-in-drupal-fasttoggle-allows-cross-site-request-forgery-ffa040266f26b6d1 2026-10-30T07:15:31.527Z weekly 0.7 https://radar.offseq.com/threat/insecure-storage-of-sensitive-information-vulnerability-in-drupal-content-sync-content-syncio-cve-2026-f971371a56d43d77 2026-10-30T07:15:28.341Z weekly 0.8 https://radar.offseq.com/threat/authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-oauth-login-oauth-cve-b985b6c343ec218b 2026-10-30T07:15:25.512Z weekly 0.8 https://radar.offseq.com/threat/missing-authorization-vulnerability-in-drupal-oauth2-token-manager-allows-forceful-browsing-cve-2026-436d0c2ab1d49826 2026-10-30T07:15:21.413Z weekly 0.7 https://radar.offseq.com/threat/the-export-and-import-users-and-customers-plugin-for-wordpress-is-vulnerable-to-privilege-escalation-a6b84682192add8b 2026-10-30T07:01:05.376Z weekly 0.8 https://radar.offseq.com/threat/authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-captcha-allows-cve-41c327aa1ec3ef15 2026-10-30T07:15:18.314Z weekly 0.8 https://radar.offseq.com/threat/improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-cve-a45ac314efd44476 2026-10-30T07:15:15.090Z weekly 0.8 https://radar.offseq.com/threat/incorrect-authorization-vulnerability-in-drupal-field-permissions-allows-forceful-browsing-cve-2026-6289de8778e4d048 2026-10-30T07:15:11.986Z weekly 0.8 https://radar.offseq.com/threat/missing-authorization-vulnerability-in-drupal-xray-audit-allows-forceful-browsing-cve-2026-96389-387a41d35c18e3eb 2026-10-30T07:15:09.366Z weekly 0.8 https://radar.offseq.com/threat/improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-6d808c03449f7473 2026-10-30T07:15:04.822Z weekly 0.8 https://radar.offseq.com/threat/incorrect-permission-assignment-for-critical-resource-vulnerability-in-drupal-s3-file-system-allows-d60ae907cec85cf9 2026-10-30T07:15:01.209Z weekly 0.7 https://radar.offseq.com/threat/incorrect-authorization-vulnerability-in-drupal-field-permissions-allows-forceful-browsing-cve-2026-01e35305dfe3b79e 2026-10-30T07:14:58.590Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-glib-networking-cve-2026-103963-4c49e0d6aa08b70e 2026-10-30T07:01:01.908Z weekly 0.8 https://radar.offseq.com/threat/the-page-and-post-restriction-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-in-all-8ff8e54c7fcca92e 2026-10-30T07:14:55.801Z weekly 0.7 https://radar.offseq.com/threat/the-firelight-lightbox-wordpress-plugin-before-2323-does-not-escape-the-url-of-links-it-opens-in-its-688714429d2ee034 2026-10-30T07:14:50.938Z weekly 0.8 https://radar.offseq.com/threat/the-events-made-easy-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-width-5db82eed49460563 2026-10-30T07:14:47.948Z weekly 0.7 https://radar.offseq.com/threat/the-enable-media-replace-wordpress-plugin-before-423-does-not-restrict-the-classes-allowed-when-fdacc9d9a9ac3d5c 2026-10-30T07:02:25.605Z weekly 0.8 https://radar.offseq.com/threat/the-user-frontend-wordpress-plugin-before-4314-does-not-sanitise-and-escape-some-user-supplied-values-e34741af24582b1c 2026-10-30T07:02:22.147Z weekly 0.7 https://radar.offseq.com/threat/the-content-egg-plugin-for-wordpress-is-vulnerable-to-unauthorized-modification-of-data-due-to-a-54776dc4903e0d8e 2026-10-30T07:02:18.967Z weekly 0.7 https://radar.offseq.com/threat/the-cool-formkit-lite-advanced-form-builder-for-elementor-plugin-for-wordpress-is-vulnerable-to-stored-22ffa9649d4b41cb 2026-10-30T07:02:15.457Z weekly 0.7 https://radar.offseq.com/threat/the-buddyforms-wordpress-plugin-before-2103-does-not-check-that-the-requester-is-allowed-to-manage-a-d2dae6865929e842 2026-10-30T07:02:12.136Z weekly 0.8 https://radar.offseq.com/threat/the-security-plugin-firewall-malware-scanner-with-auto-removal-wordpress-plugin-before-2191-does-not-953a07ac2bedcd98 2026-10-30T07:02:09.304Z weekly 0.8 https://radar.offseq.com/threat/the-joinchat-wordpress-plugin-before-642-does-not-escape-the-message-of-its-button-block-before-5b23c82d784ff6db 2026-10-30T07:02:05.953Z weekly 0.8 https://radar.offseq.com/threat/the-wp-visitor-statistics-real-time-traffic-wordpress-plugin-before-88-does-not-sanitize-and-escape-5a1687a1e4a37740 2026-10-30T07:02:03.025Z weekly 0.8 https://radar.offseq.com/threat/the-security-plugin-firewall-malware-scanner-with-auto-removal-wordpress-plugin-before-2191-does-not-2b4630aa4f5ca953 2026-10-30T07:02:00.070Z weekly 0.8 https://radar.offseq.com/threat/the-joomsport-for-sports-team-league-football-hockey-more-plugin-for-wordpress-is-vulnerable-to-bef039bcbb15920f 2026-10-30T07:01:56.049Z weekly 0.7 https://radar.offseq.com/threat/the-buddyforms-wordpress-plugin-before-2101-does-not-verify-that-a-user-editing-an-existing-entry-is-a432f0dc486a68b3 2026-10-30T07:01:52.748Z weekly 0.8 https://radar.offseq.com/threat/the-fraud-prevention-for-woocommerce-and-edd-wordpress-plugin-before-236-does-not-check-that-a-user-is-664410404b95ce4c 2026-10-30T07:01:49.899Z weekly 0.7 https://radar.offseq.com/threat/the-content-egg-affiliate-product-importer-price-comparison-plugin-for-wordpress-is-vulnerable-to-e44b0d145bd62516 2026-10-30T07:01:47.231Z weekly 0.7 https://radar.offseq.com/threat/the-forminator-forms-plugin-for-wordpress-is-vulnerable-to-limited-file-deletion-in-all-versions-up-4f4b0f14396da454 2026-10-30T07:01:43.384Z weekly 0.7 https://radar.offseq.com/threat/the-wp-visitor-statistics-real-time-traffic-wordpress-plugin-before-88-does-not-sanitize-and-escape-a-d7fdfbc7c7613095 2026-10-30T07:01:39.952Z weekly 0.8