PATCHBAY / PUBLICThreat News
Appearance
Color mode

Stronger text, borders, and focus indicators. Works with either color mode.

Online

THE LATEST / SECURITY & VULNERABILITIES

Threat News

Recent vulnerabilities and security advisories, straight from the source.

Every cached source, newest first. All entries link to the original publisher.

For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.

16,239 stories · Past 30 days · Newest first

Subscribe to this view · RSS
Source updates · Some delayed

Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.

  1. NVD

    CVE-2026-112092 — A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The af…

    Low · CVSS 4.0 2.1 · Assessor: [email protected]

    A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is the function echo of the file doctorregistration.php of the component Doctor Registration. Executing a manipulation of the argument doc_name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version detai…

    CVE-2026-112092
    Read original (opens in a new tab)
  2. NVD

    CVE-2026-112091 — A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d…

    Medium · CVSS 4.0 5.5 · Assessor: [email protected]

    A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. Impacted is an unknown function of the file delivery/checkfarmer.json.php of the component AJAX Endpoint. This manipulation of the argument fname causes information disclosure. Remote exploitation of the attack is possible. The exploit has been published and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or…

    CVE-2026-112091
    Read original (opens in a new tab)
  3. NVD

    CVE-2026-112090 — A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f…

    Low · CVSS 4.0 2.1 · Assessor: [email protected]

    A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqli_real_escape_string of the file payment/pay.php. The manipulation of the argument f_no/farmer results in sql injection. The attack may be launched remotely. The exploit is now public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either a…

    CVE-2026-112090
    Read original (opens in a new tab)
  4. NVD

    CVE-2026-111439 — 在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg_read_binary_file_blocks() 存在权限校验逻辑缺陷。该函数在入口处仅校验了起始块…

    Medium · CVSS 3.1 4.3 · Assessor: a1a479f7-907b-4ae8-a999-9148cadc9224

    在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg_read_binary_file_blocks() 存在权限校验逻辑缺陷。该函数在入口处仅校验了起始块号（startBlockNum）和块数量（blockCount）的范围，随后直接调用底层文件读取例程 ReadBinaryFileBlocksFirstCall()。该底层例程仅执行了路径规范化检查以及针对 .. 路径遍历和数据目录边界的基本检查，缺失了对调用者数据库权限（如 SELECT 权限）的校验。此外，辅助函数 is_row_data_file() 也仅用于识别文件形态，未包含权限检查。因此，任何拥有普通数据库连接权限的用户，只要能够通过 pg_relation_filepath() 等函数获取到目标表的底层关系文件路径（例如压缩数据的 _compress 文件路径），即可无需具备该表的 SELECT 权限，直接读取表数据的二进制块。 此漏洞影响此前3.0.0到6.0.0间的所有版本及补丁版，并在7.0.0-LTS版本修复。修复patch详见：https://gitcod…

    CVE-2026-111439
    Read original (opens in a new tab)
  5. NVD

    CVE-2026-94294 — The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-suppl…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-supplied data to one of its options and, on a separate unauthenticated request, redirecting the visitor's browser to a URI built from that stored data.

    CVE-2026-94294
    Read original (opens in a new tab)
  6. NVD

    CVE-2026-94272 — The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes from an authorised source, allowing unauthenticated attackers to move any order into a paid state or force it to fail.

    CVE-2026-94272
    Read original (opens in a new tab)
  7. NVD

    CVE-2026-94231 — The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allow…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify booking services and categories, including their prices.

    CVE-2026-94231
    Read original (opens in a new tab)
  8. NVD

    CVE-2026-94230 — The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not va…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not validate the submitted service price server-side, allowing unauthenticated users to create bookings at a price of their choosing and to attach them to arbitrary customer accounts.

    CVE-2026-94230
    Read original (opens in a new tab)
  9. NVD

    CVE-2026-94229 — The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its confirma…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its confirmation summary, allowing unauthenticated attackers to enumerate booking identifiers and retrieve the personal information of customers who booked an appointment, as well as invalidate the customer's own confirmation link.

    CVE-2026-94229
    Read original (opens in a new tab)
  10. NVD

    CVE-2026-94228 — The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the tok…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, allowing anyone to overwrite the plugin's entire configuration and to discard any setting they do not supply.

    CVE-2026-94228
    Read original (opens in a new tab)
  11. NVD

    CVE-2026-91831 — The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name…

    Low · CVSS 3.1 3.8 · Assessor: [email protected]

    The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name setting before using it in e-mail headers, allowing users with Author-level access and above to inject arbitrary e-mail headers, such as a hidden Bcc, and to spoof the sender.

    CVE-2026-91831
    Read original (opens in a new tab)
  12. NVD

    CVE-2026-86791 — The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually compl…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed before recording an order as paid, allowing unauthenticated users to mark any unpaid order as paid and to rewrite its total.

    CVE-2026-86791
    Read original (opens in a new tab)
  14. NVD

    CVE-2026-74922 — The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endp…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has been configured, which is the default state, allowing unauthenticated users to replace the thumbnail image the site publishes for any document.

    CVE-2026-74922
    Read original (opens in a new tab)
  15. NVD

    CVE-2026-74921 — The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before…

    Medium · CVSS 3.1 6.8 · Assessor: [email protected]

    The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted HTML attribute in the rendered gallery markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when a higher privileged user views the content.

    CVE-2026-74921
    Read original (opens in a new tab)
  16. NVD

    CVE-2026-16460 — A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's contain…

    High · CVSS 3.1 7.4 · Assessor: [email protected]

    A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsigned images, leading to full host compromise on reboot.

    CVE-2026-16460
    Read original (opens in a new tab)
  17. NVD

    CVE-2026-112089 — A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a58…

    Low · CVSS 4.0 2.0 · Assessor: [email protected]

    A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability affects the function mysqli_query of the file employees/delete.php. The manipulation of the argument e_payroll_no leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version info…

    CVE-2026-112089
    Read original (opens in a new tab)
  18. NVD

    CVE-2026-112088 — A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b6…

    Low · CVSS 4.0 2.1 · Assessor: [email protected]

    A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This affects the function mysqli_query of the file farmers/add.php. Executing a manipulation of the argument f_no/f_id/f_name/f_locallity/f_ac/f_phone can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. This product does not use versioning. This is why information about affecte…

    CVE-2026-112088
    Read original (opens in a new tab)
  19. NVD

    CVE-2026-112087 — A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing o…

    Low · CVSS 4.0 2.1 · Assessor: [email protected]

    A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file confirm.php. This manipulation of the argument cancel causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

    CVE-2026-112087
    Read original (opens in a new tab)
  20. NVD

    CVE-2026-110034 — The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount…

    Low · CVSS 3.1 3.7 · Assessor: [email protected]

    The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a confirmed booking stored with a negative total.

    CVE-2026-110034
    Read original (opens in a new tab)
  21. NVD

    CVE-2026-106010 — The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public payment-status…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public payment-status update route and treats unset credentials as valid, allowing unauthenticated attackers to mark arbitrary WooCommerce orders as paid without payment in the default configuration.

    CVE-2026-106010
    Read original (opens in a new tab)
  22. NVD

    CVE-2026-103311 — The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity of inc…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity of incoming payment webhook notifications, because the shared secret used to validate the request signature is empty by default and nothing rejects an unconfigured secret, allowing unauthenticated attackers to forge notifications that mark arbitrary orders as paid or cancel already-paid orders.

    CVE-2026-103311
    Read original (opens in a new tab)
  23. NVD

    CVE-2026-94273 — The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a co…

    Medium · CVSS 3.1 5.3 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0

    The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without completing payment.

    CVE-2026-94273
    Read original (opens in a new tab)
  24. NVD

    CVE-2026-91047 — The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooComm…

    Medium · CVSS 3.1 5.3 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0

    The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file.

    CVE-2026-91047
    Read original (opens in a new tab)
  25. NVD

    CVE-2026-91046 — The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execut…

    Medium · CVSS 3.1 4.3 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0

    The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin through 6.7.2's stored settings, including its stored API credentials and its feature and template configuration.

    CVE-2026-91046
    Read original (opens in a new tab)

Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.