🟠 CVE-2026-104457 - High (8.6)

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar filtertags action, whic...

https://www.thehackerwire.com/vulnerability/CVE-2026-104457/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104456 - High (7.6)

YesWiki before 4.6.7 contains a second-order SQL injection vulnerability in AclService::updateReq...

https://www.thehackerwire.com/vulnerability/CVE-2026-104456/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104464 - High (8.6)

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthentic...

https://www.thehackerwire.com/vulnerability/CVE-2026-104464/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104462 - High (7.5)

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which ...

https://www.thehackerwire.com/vulnerability/CVE-2026-104462/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104460 - High (7.5)

YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the {{newtextsearch}} action...

https://www.thehackerwire.com/vulnerability/CVE-2026-104460/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104467 - High (8.1)

YesWiki before 4.6.7 contains an authorization bypass vulnerability in ApiService::isAuthorized()...

https://www.thehackerwire.com/vulnerability/CVE-2026-104467/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104472 - High (7.5)

YesWiki before 4.6.7 contains a missing authorization vulnerability in the attachment download ha...

https://www.thehackerwire.com/vulnerability/CVE-2026-104472/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-90970 - Critical (9.9)

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions o...

https://www.thehackerwire.com/vulnerability/CVE-2026-90970/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-19652 - Critical (9.8)

The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to,...

https://www.thehackerwire.com/vulnerability/CVE-2026-19652/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94422 - High (8.8)

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows a...

https://www.thehackerwire.com/vulnerability/CVE-2026-94422/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104026 - High (7.8)

In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in G...

https://www.thehackerwire.com/vulnerability/CVE-2026-104026/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-94541 - Critical (9.8)

The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorizat...

https://www.thehackerwire.com/vulnerability/CVE-2026-94541/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-14378 - Critical (9.8)

The DevKit Pro plugin for WordPress is vulnerable to Authentication Bypass Leading to Administrat...

https://www.thehackerwire.com/vulnerability/CVE-2026-14378/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-19660 - Critical (9.8)

The Divi Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions u...

https://www.thehackerwire.com/vulnerability/CVE-2026-19660/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-15896 - Critical (9.1)

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Trav...

https://www.thehackerwire.com/vulnerability/CVE-2026-15896/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-93698 - Critical (9.9)

Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.

https://www.themasherwire.com/vulnerability/CVE-2026-93698/

#infosec #potatosecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-93697 - Critical (9)

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Acco...

https://www.thehackerwire.com/vulnerability/CVE-2026-93697/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-93029 - Critical (9)

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts...

https://www.thehackerwire.com/vulnerability/CVE-2026-93029/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-93698 - Critical (9.9)

Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.

https://www.thehackerwire.com/vulnerability/CVE-2026-93698/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-97637 - Critical (9.8)

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session ...

https://www.thehackerwire.com/vulnerability/CVE-2026-97637/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack