The BA Book Everything WordPress plugin up to version 1.8.28 contains a stored cross-site scripting (XSS) vulnerability via the 'booking_service_qty' parameter. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when an administrator or privileged user views the injected order record in the plugin's wp-admin order management area. Exploitation requires the privileged user to open the malicious order record, which is part of the normal order review workflow.
The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via first_name Parameter in all versions up to, and including, 1.8.27 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. An unauthenticated attacker can obtain the valid order_id, order_num, and order_hash credentials required to reach the vulnerable action_to_pay() handler simply by placing a guest booking through the public [babe-booking-form] shortcode, making the full exploit chain reachable without any account.
Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection.
A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.
This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.
The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_direction' parameter in all versions up to, and including, 4.0.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with shop manager-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The endpoint requires a valid woe_nonce and Shop Manager-level capabilities (view_woocommerce_reports or export_woocommerce_orders), and wp_magic_quotes protection is stripped via stripslashes_deep() before processing, allowing quote and backslash characters to survive intact into the SQL context.
CVE-2026-7417 is a server-side request forgery (SSRF) vulnerability in Algovate xhs-mcp version 0.8.11. It affects the xhs_publish_content function in the MCP Interface component, where manipulation of the media_paths argument can lead to SSRF. The vulnerability can be exploited remotely without authentication. Although the issue was reported early to the project, no response or fix has been provided yet. The CVSS score is 6.9, indicating a medium severity level. There are no known exploits in the wild at this time, and no official patch or remediation guidance is available.
OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Log Message in the Session Page in OrcaStatLLM-Researcher that allows attackers to inject and execute arbitrary JavaScript code in victims' browsers through malicious research topic inputs.
CVE-2026-0795 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter device's web UI. It allows authenticated remote attackers to execute arbitrary system commands due to improper input validation. Exploitation requires valid user credentials but no user interaction beyond authentication. The flaw stems from unsanitized user-supplied strings used in system calls, enabling code execution with device-level privileges. Although no public exploits are currently known, successful attacks could compromise confidentiality, integrity, and availability of the device and connected systems. European organizations using this device, especially in critical communications, face risks of disruption or takeover. Mitigation involves applying vendor patches when available, restricting access to the web interface, enforcing strong authentication, and monitoring for anomalous command execution. Countries with significant deployments of ALGO devices in public safety or enterprise sectors, such as Germany, France, and the UK, are most likely affected. Given the high CVSS score (7.2) and the nature of the vulnerability, prompt remediation is essential to prevent potential exploitation.
CVE-2026-0794 is a high-severity use-after-free vulnerability in the ALGO 8180 IP Audio Alerter device that allows remote attackers to execute arbitrary code without authentication. The flaw arises from improper validation of object existence during SIP call handling, enabling exploitation through crafted SIP messages. This vulnerability impacts confidentiality, integrity, and availability of affected devices and can lead to full device compromise. No known exploits are currently in the wild, and no patches have been released yet. European organizations using ALGO 8180 devices in critical communication infrastructures are at risk. Mitigation requires network-level protections and strict SIP traffic filtering until a vendor patch is available. Countries with significant deployments of ALGO devices and critical infrastructure reliance on IP audio alerting are most likely affected. Due to the ease of remote exploitation without authentication and the potential for complete device takeover, this vulnerability is rated high severity.
CVE-2026-0793 is a high-severity heap-based buffer overflow vulnerability in the ALGO 8180 IP Audio Alerter device, specifically in its InformaCast functionality. This flaw allows remote attackers to execute arbitrary code without requiring authentication or user interaction by sending specially crafted data that overflows a heap buffer. The vulnerability arises from improper validation of user-supplied data length before copying it into a heap buffer. Exploitation can compromise the device's confidentiality, integrity, and availability, potentially allowing full control over the device. No known exploits are currently active in the wild. European organizations using ALGO 8180 IP Audio Alerter version 5.5 are at risk, especially critical infrastructure and enterprises relying on these devices for audio alerting. Mitigation requires applying vendor patches once available and implementing network-level protections to restrict access to the device. Countries with higher adoption of ALGO products and significant critical infrastructure deployments, such as Germany, France, the UK, and the Netherlands, are most likely to be affected.
CVE-2026-0792 is a high-severity stack-based buffer overflow vulnerability in the ALGO 8180 IP Audio Alerter device. It arises from improper validation of the Alert-Info header in SIP INVITE requests, allowing remote attackers to execute arbitrary code without authentication or user interaction. The vulnerability affects version 5.5 of the product and can compromise confidentiality, integrity, and availability of the device. Although no known exploits are currently in the wild, successful exploitation could lead to full device takeover. European organizations using these devices in critical communication infrastructures are at risk. Mitigation requires immediate patching once available, network segmentation, and filtering of SIP traffic to prevent malicious INVITE requests. Countries with significant deployments of ALGO IP Audio Alerters and critical public safety or enterprise communication systems are most likely affected. The vulnerability’s CVSS score of 8.1 reflects its high impact and remote exploitability without authentication.
CVE-2026-0791 is a high-severity stack-based buffer overflow vulnerability in the ALGO 8180 IP Audio Alerter device, specifically in the handling of the SIP INVITE Replaces header. This flaw allows remote attackers to execute arbitrary code without authentication by sending a specially crafted SIP INVITE request. The vulnerability arises from improper validation of user-supplied data length before copying it into a fixed-size stack buffer, leading to potential remote code execution. The CVSS score is 8.1, indicating a significant risk to confidentiality, integrity, and availability. No known exploits are currently in the wild, and no patches have been published yet. European organizations using this device in critical communication infrastructure may face risks of device takeover or disruption. Mitigation should focus on network-level protections, strict SIP traffic filtering, and close monitoring until a vendor patch is available. Countries with higher adoption of ALGO devices and strategic reliance on IP audio alerting systems are at greater risk.
CVE-2026-0790 is a medium severity vulnerability in the ALGO 8180 IP Audio Alerter device that allows unauthenticated remote attackers to disclose sensitive information via direct URL requests to the device's web UI. The flaw, categorized as CWE-425 (Direct Request or Forced Browsing), enables attackers to bypass authentication by directly accessing specific URLs, exposing data without user interaction. While no known exploits are currently active in the wild, the vulnerability affects version 5.5 of the product and poses confidentiality risks. Exploitation requires no privileges or user interaction, but does not impact integrity or availability. European organizations using ALGO 8180 devices, particularly in sectors relying on IP audio alerting, should prioritize mitigation. No official patches are currently available, so network-level controls and monitoring are essential to reduce exposure.
CVE-2026-0789 is a medium severity vulnerability affecting ALGO 8180 IP Audio Alerter devices, specifically version 5.5. It involves the exposure of sensitive authentication cookie information within the web UI response body, allowing remote attackers to access sensitive data without authentication or user interaction. The flaw stems from improper handling of sensitive information in the device's web interface. While it does not allow direct control or disruption of the device, the disclosed information could facilitate further attacks. No known exploits are currently reported in the wild. European organizations using these devices should be aware of this information disclosure risk and apply mitigations promptly.
CVE-2026-0788 is a persistent cross-site scripting (XSS) vulnerability in the ALGO 8180 IP Audio Alerter's web interface, specifically in the syslog viewing functionality. This flaw allows unauthenticated remote attackers to inject arbitrary scripts, which execute with the privileges of the targeted user. Exploitation does not require authentication or user interaction, increasing its risk. The vulnerability stems from improper input validation, enabling attackers to manipulate the web UI and potentially perform unauthorized actions. Although the CVSS score is medium (5.3), the lack of authentication requirement raises concerns about ease of exploitation. No known exploits are currently reported in the wild. European organizations using ALGO 8180 devices should prioritize patching or mitigating this issue to prevent potential compromise of administrative sessions or further attacks leveraging the injected scripts.
CVE-2026-0787 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter device, specifically in the SAC module. It allows remote attackers to execute arbitrary code without authentication by exploiting improper input validation before system calls. The vulnerability affects version 5.5 of the product and can compromise confidentiality, integrity, and availability of the device. No known exploits are currently in the wild. European organizations using this device in critical communication infrastructure could face significant operational disruption and data compromise. Mitigation requires immediate patching once available, network segmentation, and strict input validation controls. Countries with higher adoption of ALGO devices in public safety or enterprise communications are at greater risk. Given the ease of exploitation and impact, this vulnerability is rated high severity with a CVSS score of 8.1.
CVE-2026-0786 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter device, specifically within its SCI module. The flaw arises from improper validation of user-supplied input used in system calls, allowing authenticated remote attackers to execute arbitrary code on the device. Exploitation requires low privileges and no user interaction but does require authentication. The vulnerability impacts confidentiality, integrity, and availability of affected devices. No known exploits are currently in the wild. European organizations using ALGO 8180 devices, especially in critical communication infrastructures, face risks of device takeover and disruption. Mitigation involves applying vendor patches when available, restricting access to the device management interface, and implementing strict input validation and network segmentation. Countries with significant deployments of ALGO products and critical infrastructure reliance on IP audio alerting systems, such as Germany, France, and the UK, are most likely affected.
CVE-2026-0785 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter device, specifically in its API interface. The flaw allows authenticated remote attackers to execute arbitrary system commands due to improper validation of user-supplied input. Exploitation requires low privileges and no user interaction but has a high impact on confidentiality, integrity, and availability. No known active exploits have been reported yet. The vulnerability affects version 5.5 of the product. European organizations using this device in critical communication infrastructures are at risk. Mitigation involves applying vendor patches when available, restricting API access, and implementing network segmentation and monitoring. Countries with significant deployments of ALGO devices and critical infrastructure reliance on IP audio alerting are most likely affected.
CVE-2026-0784 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter's web-based user interface. It allows authenticated remote attackers to execute arbitrary code on affected devices by exploiting improper validation of user-supplied input used in system calls. The vulnerability requires authentication but no user interaction beyond that. It impacts version 5.5 of the product and can compromise confidentiality, integrity, and availability of the device. No known exploits are currently in the wild. European organizations using this device in critical communication infrastructure could face significant operational disruption and data compromise. Mitigation involves applying patches when available, restricting access to the management interface, and implementing strict input validation and network segmentation. Countries with higher adoption of ALGO devices and critical infrastructure reliance on IP audio alerting are most at risk, including Germany, France, the UK, and the Netherlands. The CVSS score is 7.
CVE-2026-0783 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter's web UI, allowing authenticated remote attackers to execute arbitrary code. The flaw arises from improper validation of user-supplied input used in system calls, enabling code execution with device-level privileges. Exploitation requires authentication but no user interaction beyond that. This vulnerability impacts confidentiality, integrity, and availability of affected devices. No known exploits are currently reported in the wild. European organizations using ALGO 8180 devices, especially in critical infrastructure or public safety sectors, face risks of device takeover and disruption. Mitigation involves applying vendor patches when available, restricting administrative access, and monitoring device logs for suspicious activity. Countries with higher deployments of ALGO products and strategic use in public alerting systems, such as Germany, France, and the UK, are most likely affected.
