Browse CVEs

MEDIUM 6.3 CVE-2026-19069 A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrec… No fix yet Fix from $1,6002026-08-06 MEDIUM 6.3 CVE-2026-19068 A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /treatmentdeta… No fix yet Fix from $1,6002026-08-06 MEDIUM 6.3 CVE-2026-19067 A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /treatmen… No fix yet Fix from $1,6002026-08-06 MEDIUM 6.3 CVE-2026-19065 A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects some unknown processing of t… No fix yet Fix from $1,6002026-08-06 HIGH 7.3 CVE-2026-19062 A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/se… No fix yet Fix from $1,9502026-08-06 MEDIUM 5.3 CVE-2026-19060 A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulation leads to code injection. … No fix yet Fix from $1,6002026-08-06 MEDIUM 5.3 CVE-2026-19058 A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/… No fix yet Fix from $1,6002026-08-06 MEDIUM 5.3 CVE-2026-19054 A vulnerability was detected in Lspace-io lspace-server up to 79f02fe5aa8970b210a6a05cf097155f8d9ffd71. This issue affects the function fileExists/re… No fix yet Fix from $1,6002026-08-06 MEDIUM 5.4 CVE-2026-18487 A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a… No fix yet Fix from $1,6002026-08-06 CRITICAL 9.3 CVE-2026-18367 A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 a… No fix yet Fix from $2,3002026-08-06 CRITICAL 9.8 CVE-2026-17032 Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attacker… No fix yet Fix from $2,3002026-08-06 HIGH 7.5 CVE-2026-16620 The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 does not enforce its server-side price allowlist for products configured in "Se… No fix yet Fix from $1,9502026-08-06 HIGH 7.5 CVE-2026-16619 The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the number of second-factor verification attempts, tracking them against a … No fix yet Fix from $1,9502026-08-06 CRITICAL 9.8 CVE-2026-15734 A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary c… No fix yet Fix from $2,3002026-08-06 CRITICAL 9.8 CVE-2026-15733EPSS 14% A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attack… No fix yet Fix from $2,3002026-08-06 CRITICAL 9.8 CVE-2026-15732 A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated att… No fix yet Fix from $2,3002026-08-06 MEDIUM 5.3 CVE-2026-16067 The Event Booking Manager for WooCommerce (Pro) WordPress plugin before 5.0.3 does not validate the ticket price on the server during its native (non… No fix yet Fix from $1,6002026-08-06 MEDIUM 5.3 CVE-2026-15208 The RegistrationMagic WordPress plugin before 6.0.9.5 does not compare the verified PayPal capture's amount, currency, payee, or prior use against th… No fix yet Fix from $1,6002026-08-06 MEDIUM 5.3 CVE-2026-15152 The WP Hotel Booking WordPress plugin before 2.3.2 does not verify that a payment notification corresponds to a payment made to the site's own mercha… No fix yet Fix from $1,6002026-08-06 MEDIUM 5.3 CVE-2026-15149 The WP Hotel Booking WordPress plugin before 2.3.3 does not ensure that room quantities and the resulting order total are non-negative when placing a… No fix yet Fix from $1,6002026-08-06 MEDIUM 5.3 CVE-2026-15147 The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming payment notifications, failing to v… No fix yet Fix from $1,6002026-08-06 MEDIUM 5.3 CVE-2026-14936 The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the site's own configured merchant… No fix yet Fix from $1,6002026-08-06 MEDIUM 5.3 CVE-2026-14842 The Events Made Easy WordPress plugin before 3.1.2 does not bind the payment authorization token to the payment record being charged, allowing unauth… No fix yet Fix from $1,6002026-08-06 MEDIUM 5.3 CVE-2026-14831 The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking duration on the server side when a… No fix yet Fix from $1,6002026-08-06 CRITICAL 10.0 CVE-2026-14812 The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and, in some builds, … No fix yet Fix from $2,3002026-08-06 HIGH 7.5 CVE-2026-13399 The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.20 does not have proper authorization checks on a REST endpoint, allowing unau… No fix yet Fix from $1,9502026-08-06 MEDIUM 5.3 CVE-2026-13342 The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate requests to its optional IP-based login restriction feature, … No fix yet Fix from $1,6002026-08-06 MEDIUM 5.9 CVE-2026-12901 The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated atta… No fix yet Fix from $1,6002026-08-06 HIGH 7.5 CVE-2026-12584 The Payment Gateway for Redsys & WooCommerce Lite WordPress plugin before 7.0.2 does not verify the authenticity of incoming payment-provider notific… No fix yet Fix from $1,9502026-08-06 MEDIUM 5.3 CVE-2026-12501 The WP Travel Engine WordPress plugin before 6.8.2 does not verify that an incoming PayPal payment notification was sent to the site's configured mer… No fix yet Fix from $1,6002026-08-06