The Email Customizer for WooCommerce (Pro) WordPress plugin versions up to and including 3.9.5 contains a vulnerability that allows authenticated users with subscriber-level access or higher to execute arbitrary PHP code on the server. This occurs due to insufficient authorization and input sanitization in the send_test_mail() function, enabling user-controlled PHP code to be written to executable files in the uploads directory. Exploitation can lead to full site compromise.
Elementor Website Builder plugin for WordPress versions up to and including 4.2.3 contains a vulnerability that allows authenticated users with contributor-level access or higher to access sensitive information. Specifically, attackers can extract the full post content and plaintext post passwords of private, draft, pending, and future posts from any author, including administrators and editors. The vulnerability is due to missing authorization checks related to the 'keys_conversion_map' parameter.
The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including marking unpaid orders as paid and cancelling completed orders.
The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including orders that were already paid or completed.
The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of the payment notifications it receives, as the secret used to sign them is empty by default, allowing unauthenticated attackers to forge an approved-payment notification and mark arbitrary orders as paid, or force them to failed.
CVE-2026-79821 is a high-severity vulnerability in Hewlett Packard Enterprise HPE NonStop SOAP 4.0 caused by improper input validation. This flaw may lead to memory corruption and result in a system crash or downtime. No specific affected versions or patch information is provided.
A critical vulnerability (CVE-2026-76519) in Cisco Secure Email Gateway's Advanced Malware Protection feature allows unauthenticated remote attackers to write arbitrary files and execute commands with root privileges. The flaw affects devices with Content Scanner Tools versions earlier than 25.3.0.5525 when the file reputation service is enabled. Cisco has confirmed active exploitation in the wild and has released patches in AsyncOS versions 15.5.5-014 and 16.5.0-780. The US CISA has added this vulnerability to its Known Exploited Vulnerabilities catalog, urging prompt patching. Cisco recommends migrating to patched software releases and provides guidance for incident response and forensic preservation. Cisco manages remediation for cloud devices and has deployed mitigations under its control.
CVE-2026-76668 is a medium severity vulnerability in the Hewlett Packard Enterprise HPE NonStop Kernel involving improper handling of overlap between protected memory ranges. This flaw may allow user space processes to access privileged or unmapped data, potentially leading to integrity and availability impacts. The vulnerability has a CVSS 3.1 base score of 6.3, indicating a moderate risk level. No affected versions or patch information are currently provided.
The Import and export users and customers plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in all versions up to and including 2.4.5. This vulnerability arises from insufficient input sanitization and output escaping in the Custom Column User Meta Profile Fields feature. Authenticated users with custom-level access or higher can inject malicious scripts that execute when other users view the affected pages.
The Post and Page Builder by BoldGrid WordPress plugin (up to version 1.27.13) contains a stored cross-site scripting (XSS) vulnerability in the Table Designer's 'data-label' attribute. Authenticated users with Contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping.
A security vulnerability identified as CVE-2026-76667 affects HPE NonStop EXPAND and may lead to an out-of-bounds memory read condition. This vulnerability has a CVSS 3.1 base score of 5.7, indicating medium severity. The flaw does not impact confidentiality but can affect integrity and availability. No specific affected versions or patch information are provided. There are no known exploits in the wild at this time.
A security vulnerability identified as CVE-2026-76666 affects HPE NonStop EXPAND and may cause an out-of-bounds memory read. This vulnerability has a medium severity rating with a CVSS score of 4.7. It requires local attack vector with high attack complexity and privileges, and does not involve user interaction. The vulnerability impacts confidentiality but not integrity or availability. No specific affected versions or patches have been provided.
Znuny versions through 7.3.6 contain a vulnerability that allows attackers to bypass standard login procedures by manipulating the 'Remote-User' HTTP request header. This flaw occurs because the application trusts this header for authentication fallback, enabling attackers to impersonate any user, including administrators, without a password. This grants unauthorized access to sensitive system functions and confidential data.
A security vulnerability identified as CVE-2026-76664 affects HPE NonStop EXPAND and may lead to out-of-bounds memory read and write operations. This vulnerability has a medium severity rating with a CVSS score of 6.4. No specific affected versions or patches are provided in the available data.
Znuny versions through 7.3.6 have a vulnerability in the ticket search functionality where user input is directly concatenated into SQL queries without proper validation. This allows attackers to perform SQL injection via the ContentSearch parameter, potentially leading to unauthorized data access, modification, or denial of service.
A vulnerability in HPE NonStop EXPAND allows out-of-bounds memory reads that can lead to a buffer overflow. This flaw could potentially be exploited to impact confidentiality, integrity, and availability of the affected system. The vulnerability is rated high severity with a CVSS score of 7.1. No specific affected versions or patch information are provided.
Wheels versions 1.1.8 through 4.1.1 contain a critical SQL injection vulnerability in several dynamic finder methods and query builder functions when parsing caller-supplied quoted values. This flaw allows crafted input to alter SQL queries, potentially exposing sensitive data such as authentication tokens and password reset information. Numeric columns are not affected. A related issue affects the whereBetween() function in versions 4.0.0 through 4.1.1 on MySQL/MariaDB with backslash escaping enabled. The vulnerability is fixed in version 4.1.2.
DragonFly BSD through version 6.4.2 has a vulnerability in its ARP input handlers where the hardware and protocol address length fields of incoming ARP packets are not validated. This flaw allows an unauthenticated attacker on the adjacent network to craft a malicious ARP request that causes out-of-bounds reads of kernel memory. The leaked memory, up to approximately 250 bytes, may include sensitive kernel pointers. The issue is expected to be fixed in the upcoming 6.6 stable release.
The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that regenerates its managed pages, allowing unauthenticated users to force-publish unpublished pages and overwrite their content, create missing ones, and change the options that reference them.
The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting it inside an HTML attribute in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against any visitor, including a logged-in administrator.