VulDB Recent Entries

A vulnerability, which was classified as critical, has been found in MISP up to 2.5.47. This vulnerability affects unknown code of the component Two-Factor Authentication Verification. This manipulation causes authentication bypass by capture-replay. This vulnerability is registered as CVE-2026-103655. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Fujifilm Business Innovation Corp Apeos 3060 2560 1860 Japan model, Apeos 3061 2561 2061 Japan model, Apeos 4570 3570 Japan model, Apeos 5330 Japan model, Apeos 6340 Japan model, Apeos 7580 6580 5580 Japan model, Apeos C2360 C2060 Japan model, Apeos C3061 C2561 C2061 Japan model, Apeos C3567 C3067 C2567 Japan model, Apeos C4030, C3530 Japan model, Apeos C5240 Japan model, Apeos C7070 C6570 C5570 C4570 C3570 C3070 C2570 Japan model, Apeos C7071 C6571 C5571 C4571 C3571 C3071 C2571 Japan model, Apeos C8180 C7580 C6580 Japan model, ApeosPrint 4560 S 3960 S 3360 S Japan model, ApeosPrint 4830 4830 JM Japan model, ApeosPrint 6340 Japan model, ApeosPrint C3560 S C3060 S Japan model, ApeosPrint C4030 C3530 Japan model, ApeosPrint C5240 Japan model, ApeosPrint C5570 C4570 Japan model, ApeosPro C810 C750 C650 Japan model, Revoria Press E1136 E1125, E1110 E1100 Japan model, Revoria Press E1136P, E1125P, E1110P Japan model, Revoria Press EC1100 Japan model, Revoria Press EC2100S EC2100 Japan model, Revoria Press SC285S SC285 Japan model, RevoriaPress SC180 SC170 Japan model, Apeos 3560 3060 2560 Asia Pacific model, Apeos 3561 3061 2561 Asia Pacific model, Apeos 5330 4830 Asia Pacific model, Apeos 5570 4570 Asia Pacific model, Apeos 6340 Asia Pacific model, 6580 Asia Pacific model, Apeos C3060 C2560 C2060 Asia Pacific model, C2061 Asia Pacific model, C2567 Asia Pacific model, C3530 Asia Pacific model, Apeos C5240 Asia Pacific model, C2570 Asia Pacific model, C2571 Asia Pacific model, C6580 Asia Pacific model, 3360 S Asia Pacific model, ApeosPrint 5330 Asia Pacific model, ApeosPrint 6340 Asia Pacific model, ApeosPrint C4030 Asia Pacific model, ApeosPrint C5240 Asia Pacific model, ApeosPrint C5570 Asia Pacific model, C650 Asia Pacific model, E1100 Asia Pacific model, Revoria Press EC1100 Asia Pacific model, EC2100 Asia Pacific model, SC285 Asia Pacific model, SC170 Asia Pacific model, 2561 Europe model, Apeos 5330, 4830 Europe model, Apeos 5570, 4570 Europe model, C2060 Europe model, 2560 Europe model, C3530 Europe model, C3070 Europe model, ApeosPrint 5330, ApeosPrint C4030, C650 Europe model, E1125 , E1100 Europe model, Revoria Press EC1100 Europe model, EC2100 Europe model, SC285 Europe model and SC170 Europe model up to 1.1.3. This affects an unknown part of the component Web Management Interface. The manipulation results in path traversal. This vulnerability is cataloged as CVE-2026-78249. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as critical has been found in Apache Camel Quarkus. Affected by this issue is some unknown functionality of the component Xalan TransformerFactory. The manipulation leads to improper input validation. This vulnerability is listed as CVE-2026-88789. The attack may be initiated remotely. There is no available exploit.

A vulnerability described as problematic has been identified in Social Media Share Buttons & Social Sharing Icons Plugin up to 3.0.1 on WordPress. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross site scripting. This vulnerability is tracked as CVE-2026-89047. The attack can be launched remotely. No exploit exists.

A vulnerability marked as critical has been reported in MISP up to 2.5.47. Affected is an unknown function of the component OTP Authentication Flow. Performing a manipulation results in authentication bypass by capture-replay. This vulnerability is identified as CVE-2026-103651. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in ThimPress LearnPress Plugin up to 4.4.8 on WordPress. This impacts the function CourseMaterialTemplate::render_material_items of the component Course Material AJAX Handler. Such manipulation of the argument course_id/item_id leads to improper control of resource identifiers. This vulnerability is referenced as CVE-2026-93882. It is possible to launch the attack remotely. No exploit is available.

A vulnerability identified as problematic has been detected in spacetime Ad Inserter Plugin up to 2.8.18 on WordPress. This affects the function replace_ai_tags. This manipulation of the argument HTTP_REFERER causes cross site scripting. The identification of this vulnerability is CVE-2026-19902. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability categorized as critical has been discovered in Ultimate Multisite Plugin up to 2.15.0 on WordPress. The impacted element is the function login_customer_after_checkout of the component Ajax Handler. The manipulation of the argument checkout_form results in improper authentication. This vulnerability was named CVE-2026-75957. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in ByteCoreStack Plugin up to 1.2.3 on WordPress. It has been rated as problematic. The affected element is the function execute_tool of the component MCP Tool. The manipulation of the argument uid leads to improper privilege management. This vulnerability is uniquely identified as CVE-2026-19807. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in WebRehab Super Forms Plugin up to 6.3.316 on WordPress. It has been declared as critical. Impacted is the function before_email_success_msg of the component Register/Login add-on. Executing a manipulation of the argument role can lead to improper privilege management. This vulnerability is handled as CVE-2026-15989. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in WAGO 0751-9x01, 0750-811x-xxxx-xxxx, 0750-821x-xxx-xxx, 0762-420x-8000-000x, 0762-430x-8000-000x, 0762-520x-8000-000x, 0762-530x-8000-000x, 0762-620x-8000-000x, 0762-630x-8000-000x, 0752-8303-8000-0002 and 0762-340x. It has been classified as very critical. This issue affects some unknown processing of the component BACnet File Object. Performing a manipulation results in path traversal. This vulnerability is known as CVE-2025-41753. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in Featured Image from URL Plugin and Featured Image from URL Premium Plugin on WordPress and classified as problematic. This vulnerability affects unknown code. Such manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2026-101147. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Hubtel Payments for Hubtel Plugin up to 1.0.1 on WordPress and classified as problematic. This affects an unknown part of the file debug.log. This manipulation causes information disclosure. This vulnerability appears as CVE-2026-96255. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in Hubtel Payments for Hubtel Plugin up to 1.0.1 on WordPress. Affected by this issue is some unknown functionality of the component Payment Callback Handler. The manipulation results in missing authorization. This vulnerability is reported as CVE-2026-96200. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Hubtel Payments for Hubtel Plugin up to 1.0.1 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to authorization bypass. This vulnerability is documented as CVE-2026-96173. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in WP Fusion Lite Plugin up to 3.47.x on WordPress. Affected is an unknown function of the component Settings Handler. Executing a manipulation can lead to missing authorization. This vulnerability is registered as CVE-2026-90974. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in WP Fusion Lite Plugin up to 3.47.x on WordPress. This impacts an unknown function of the component Admin AJAX Handler. Performing a manipulation results in improper access controls. This vulnerability is cataloged as CVE-2026-90972. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in Pro Like Button Plugin up to 1.x on WordPress. This affects an unknown function. Such manipulation leads to sql injection. This vulnerability is listed as CVE-2026-89296. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in If-So Dynamic Content Plugin up to 1.10.1 on WordPress. The impacted element is an unknown function. This manipulation of the argument conversion name causes cross site scripting. This vulnerability is tracked as CVE-2026-87973. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in If-So Dynamic Content Plugin up to 1.10.1 on WordPress. The affected element is an unknown function. The manipulation results in cross site scripting. This vulnerability is identified as CVE-2026-87970. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.