The Forminator Forms WordPress plugin before 1.58.4 does not enforce payment on the server side when a form's configured payment gateway is unavailable, allowing unauthenticated visitors to complete a payment-gated User Registration form without paying and be assigned the form's configured role, up to administrator, after the gateway has been connected and later disconnected.
The Download Manager WordPress plugin before 3.3.73, Download Manager WordPress plugin before 7.6.2 does not verify a package's configured role restriction when validating a package password, allowing an unauthenticated user who knows the password of a role-restricted package to obtain a download key and download the protected file.
The Download Manager WordPress plugin before 3.3.73, Download Manager WordPress plugin before 7.6.2 does not verify that a visitor is allowed to access a package before its media-preview renderers issue a download key for it, allowing unauthenticated visitors to download password-locked and role-restricted files by reading the key from a public page.
The Data Tables Generator by Supsystic WordPress plugin before 1.15.8 does not perform any authorization or ownership check before returning the stored contents of a table, relying only on a nonce that is exposed to every anonymous visitor, allowing unauthenticated users to read the full contents of any table by its identifier, including tables that are never published anywhere on the site.
The User Registration & Membership WordPress plugin before 5.3.2 does not enforce its payment-before-login restriction when a registration is submitted without a membership selection, allowing unauthenticated users to create an account on a payment-gated registration form and log in without completing payment.
The User Registration & Membership WordPress plugin before 5.3.2 does not verify that a payment has actually been completed before extending a paid membership subscription, allowing authenticated users with an active paid subscription to renew it indefinitely without paying.
The User Registration & Membership WordPress plugin before 5.3.2 does not verify that a discount coupon applied to a paid membership plan is actually valid for that plan before treating a fully discounted order as paid, allowing unauthenticated users to be granted the role mapped to a paid plan without paying for it, which can lead to privilege escalation up to administrator where a plan is mapped to a privileged role.
The Code Snippets WordPress plugin before 4.1.0 does not verify network-level capabilities before honouring a network-scope parameter on its snippet import routes on multisite, allowing an administrator of a single subsite without network-management rights to create, overwrite and deactivate network-wide snippets belonging to the whole network.
The Elementor Website Builder WordPress plugin before 4.3.6 does not validate or escape an element identifier before rendering it into a client-side framework attribute that is evaluated as JavaScript, allowing users with the Contributor role to store scripts that execute in the browser of anyone viewing the affected content, including an administrator reviewing the submission for publication.
The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its Button module settings before outputting them on the front end, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups).
The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its page-builder module settings before outputting them, allowing users with access to the builder (Administrator by default) to inject arbitrary JavaScript that executes when the affected page is viewed by any visitor; this has impact even on administrators where the unfiltered_html capability is disallowed, e.g. in multisite setups.
The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its staff member settings before outputting them in pages, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups).
The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its module settings before outputting them in an href attribute, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups).
Able2Shell is a collection of 33 reported zero-day vulnerabilities in N-able N-central, disclosed publicly with proof-of-concept code. Among these, seven critical vulnerabilities have been officially recognized and patched by N-able in the N-central 2026.4 Hotfix 2 release. The vulnerabilities include high-severity issues such as XML external entity (XXE) attacks, server-side request forgery (SSRF), OGNL injection, local privilege escalation, remote code execution, and stored cross-site scripting (XSS). One exploit chain allows unauthenticated remote command execution as the nable user, and others can lead to root privileges through chained exploits. N-able has confirmed and patched the most critical issues but has not mapped all 33 findings individually. The affected versions are N-central prior to 2026.4.1.26. No confirmed customer compromises have been reported as of November 10, 2026.
A cryptographic integrity vulnerability (CVE-2026-42784) exists in the sequoia-openpgp implementation used by rust-rpm-sequoia, related to key flag confusion. This issue affects Red Hat Enterprise Linux 10.0 Extended Update Support and related variants. Red Hat has issued an important security advisory and released updated packages to address this flaw.
Red Hat has issued an important security advisory for the nodejs:22 module in Red Hat Enterprise Linux 8, addressing multiple vulnerabilities in Node.js and its dependencies. The update fixes several denial of service issues in the brace-expansion and undici libraries, certificate validation bypasses, cache poisoning, and DNS hostname truncation bugs. These vulnerabilities could lead to denial of service, information disclosure, and TLS certificate validation bypass. The advisory includes a rebase to the latest Node.js 22 release for RHEL 8. Users are advised to apply the update to mitigate these issues.
Fenrir Inc.'s Sleipnir Mobile for iPhone / iPad, including the Black Edition, suffers from improper certificate validation. This vulnerability could allow a man-in-the-middle attacker to intercept encrypted communications. The issue affects versions up to and including 4.15.1. The CVSS score is 4.2, indicating a medium severity level.
A security vulnerability in Vim (Vi IMproved) allows arbitrary code execution via Vimscript injection through an unescaped filename in the netrw s:NetrwMarkFile() filter() expression. This issue is identified as CVE-2026-43961 and affects Red Hat Enterprise Linux 8 versions. The vulnerability has been rated with an Important security impact by Red Hat. A fix is available through updated Vim packages provided by Red Hat.
A denial of service vulnerability (CVE-2026-116260) exists in libimobiledevice due to a double free in the service_receive function. This issue affects Red Hat Enterprise Linux 8 and related products. Red Hat has issued a security update to address this flaw.
This Red Hat Security Advisory addresses multiple vulnerabilities and bugs in the Linux kernel packages, which form the core of Linux operating systems. The update fixes a range of security issues including out-of-bounds writes, buffer overflows, null pointer dereferences, denial of service conditions, and privilege checks across various kernel subsystems such as drm/amdkfd, procfs, netfilter, Bluetooth, libceph, and nvme. The advisory covers a broad set of CVEs and includes bug fixes and enhancements to improve kernel stability and security. Red Hat recommends applying the update promptly and rebooting the system for the fixes to take effect.