Aggregator

A vulnerability marked as critical has been reported in saadiqbal WP Easy Pay Plugin up to 4.5.0 on WordPress. This affects an unknown function of the component Authorization. The manipulation of the argument Status leads to authorization bypass. This vulnerability is traded as CVE-2026-12738. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability labeled as problematic has been found in catalyst2020 Catalyst Connect Zoho CRM Client Portal Plugin up to 2.2.0 on WordPress. The impacted element is an unknown function of the component SQL Query Handler. Executing a manipulation of the argument uid can lead to sql injection. This vulnerability appears as CVE-2025-5017. The attack may be performed from remote. There is no available exploit.

A vulnerability identified as problematic has been detected in stylemix Cost Calculator Builder Plugin up to 4.0.11 on WordPress. The affected element is an unknown function of the file template body of the component Global Settings. Performing a manipulation of the argument client_secret/secret key results in missing encryption of sensitive data. This vulnerability is reported as CVE-2026-10865. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as critical has been discovered in wclovers WCFM Plugin up to 6.7.27 on WordPress. Impacted is an unknown function of the component Product Archive. Such manipulation leads to improper control of resource identifiers. This vulnerability is documented as CVE-2026-10041. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in thimpress WP Hotel Booking Plugin up to 2.3.1 on WordPress. It has been rated as critical. This issue affects the function web_hook_process_paypal_standard of the component IPN Handler. This manipulation of the argument test_ipn causes authentication bypass by capture-replay. This vulnerability is registered as CVE-2026-11901. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in tigroumeow Code Engine Plugin up to 0.3.5 on WordPress. It has been declared as critical. This vulnerability affects the function code-engine of the component Shortcode Handler. The manipulation results in injection. This vulnerability is cataloged as CVE-2025-6784. The attack may be launched remotely. There is no exploit available.

美国佛罗里达州男子安吉洛·马蒂诺因在担任美国一家网络安全公司的勒索软件谈判代表期间，与黑客合谋部署勒索软件，被判处五年以上监禁。美国司法部于周四确认了该判决，并指出政府查获了价值超过1000万美元的加

Vulnerability / Email SecurityZimbra is urging customers to apply updates to address a critical se

Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code execution. The vulnerability has been described as a case of stored cross-site scripting (XSS) that could allow specially crafted emails to execute malicious scripts in a user's session. It has yet to be assigned a CVE identifier. "The

日本可重复使用火箭实验机体首次试飞成功日本宇宙航空研究开发机构也就是JAXA在7月11日当天公开发布博文，官宣已经顺利完成可重复使用火箭RV-X实验机体的发射与完整回收流程，全程各项状态指标都符合预设

Покупателей серверов и виртуальных машин могут обязать подтверждать личность через «Госуслуги»

中国大陆摩托车品牌张雪机车创始人张雪受访时称，公司最迟明年在台湾开设门店。张雪在媒体专访中说，他非常想在台湾开店，现在正在对接中，最晚不超过明年，“开幕时我一定要亲自到场”。对于赴台开店，张雪表示，“

A vulnerability was found in wpvibes Form Vibes Plugin up to 1.5.2 on WordPress. It has been classified as problematic. This affects an unknown part of the component Contact Form 7. The manipulation leads to cross site scripting. This vulnerability is listed as CVE-2026-13378. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in SureCart Plugin up to 4.2.3 on WordPress and classified as critical. Affected by this issue is some unknown functionality of the component Profile Synchronization. Executing a manipulation of the argument email can lead to improper synchronization. This vulnerability is tracked as CVE-2026-7655. The attack can be launched remotely. No exploit exists.

刚看完，果然只有星爷拍的电影才值得花钱到电影院观看，真的牛逼！

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

A vulnerability has been found in printfriendly Print PDF & Email by PrintFriendly Plugin up to 5.5.10 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality of the component CSS Handler. Performing a manipulation of the argument content_position_css results in cross site scripting. This vulnerability is identified as CVE-2026-9738. The attack can be initiated remotely. There is not any exploit available.

A vulnerability, which was classified as critical, was found in rainafarai Notification for Telegram Plugin up to 3.5.1 on WordPress. Affected is an unknown function of the component Authorization Verification. Such manipulation leads to authorization bypass. This vulnerability is referenced as CVE-2026-7620. It is possible to launch the attack remotely. No exploit is available.

«Cyber Shield – это не супергерой, а вполне серьезный план Британии против хакеров.