Статьи Support
🚨 CVE-2026-42691
Authorization Bypass Through User-Controlled Key vulnerability in EventPrime EventPrime eventprime-event-calendar-management allows Privilege Abuse.This issue affects EventPrime: from n/a through 4.3.6.0.
🚨 CVE-2026-54852
Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Restriction WordPress (WP): from n/a through 1.6.1.
🚨 CVE-2026-107028
Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data.
🚨 CVE-2026-107034
Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data.
🚨 CVE-2026-107039
Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName 2.337 allows unauthorized attackers to arbitrarily force a device reset or Denial of Service (DoS).
🚨 CVE-2026-109891
Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Happy Addons for Elementor: from n/a through 3.50.1.
🚨 CVE-2026-116864
Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions.
🚨 CVE-2026-116865
Editor PHP Object Injection in Zippy <= 1.7.0 versions.
🚨 CVE-2026-116866
Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions.
🚨 CVE-2026-116869
Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.
🚨 CVE-2026-118073
Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.
🚨 CVE-2026-118074
Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.
🚨 CVE-2026-118077
Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.
🚨 CVE-2026-118078
Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.
🚨 CVE-2026-118079
Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions.
🚨 CVE-2026-118082
Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.
🚨 CVE-2026-118083
Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions.
🚨 CVE-2026-118084
Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions.
🚨 CVE-2026-118085
Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions.
🚨 CVE-2026-27394
Unauthenticated Cross Site Scripting (XSS) in Eventer <= 0.1.1 versions.
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.