Threat database

Contributor PHP Object Injection in SEO Plugin by Squirrly SEO <= 14.2.5 versions.

Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions.

Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions.

Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.13 versions.

Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce <= 2.1.2 versions.

Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions.

Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions.

Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions.

Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions.

Administrator SQL Injection in WP Activity Log <= 5.6.6 versions.

Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions.

Contributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions.

Contributor Cross Site Scripting (XSS) in Happy Addons for Elementor <= 3.23.1 versions.

Contributor Cross Site Scripting (XSS) in Qi Addons For Elementor <= 1.11 versions.

Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions.

Shop manager Content Injection in Astra WordPress Theme <= 4.13.12 versions.

An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's key reference, before the message is authenticated, so an eleven-byte extension triggers a 2 GB allocation. Repeated requests exhaust server memory. Users are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue.

TeamViewer has disclosed multiple high-severity vulnerabilities affecting its Full Client and Host software on Windows, Linux, and macOS. The most critical flaw is a remote session access control bypass (CVE-2026-92370) that could allow unauthorized remote code execution. Additional issues include path traversal, heap-based buffer overflow, TOCTOU race condition, and improper path validation vulnerabilities that may enable local attackers to execute code remotely or escalate privileges. TeamViewer urges users to update to version 15.82, which addresses these flaws. No evidence of active exploitation or public exploit code is currently known.

A heap-based buffer overflow vulnerability exists in rpm due to incorrect header type declaration of RPMTAG_FILESIGNATURES in crafted unsigned RPM packages. This causes a one-byte buffer allocation followed by an out-of-bounds write of attacker-controlled data. The flaw is exploitable via rpm2cpio, rpm2archive, and rpm -qlvp commands on untrusted packages. The vulnerability has a CVSS score of 7.1, indicating medium severity.

CVE-2026-88920 is a critical authentication bypass vulnerability in the DOM security processor of Apache WSS4J. It enables unauthenticated remote attackers to forge authenticated SOAP messages by exploiting a crafted unsigned SAML sender-vouches assertion with an attacker-controlled key. This vulnerability is fixed in Apache WSS4J versions 4.0.2, 3.0.6, and 2.4.4.