VULN/vuln-nvd
1
0 Fork 0
Code Pull Requests Actions Activity

NVD update 2026-11-15T08:47:45Z

Browse Source
This commit is contained in:
Vulnerability Bot committed 2026-11-15 09:47:50 +01:00
1 parent 7bcb3f153f
commit 4425a1ddb8
15 files changed
+15 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

data/2026/CVE-2026-103361.json
+1
View File
@@ -0,0 +1 @@
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Payment Gateway via Valitor for WooCommerce","vendor":"Unknown","versions":[{"lessThan":"1.9.41","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Payment Gateway via Valitor for WooCommerce WordPress plugin before 1.9.41 does not properly validate the authenticity of payment callbacks, relying on a verification secret that ships with a hard-coded default value used by every store that has not changed it, allowing unauthenticated attackers to forge a valid payment confirmation and mark arbitrary orders as paid."}],"id":"CVE-2026-103361","lastModified":"2026-11-15T07:16:49.253","metrics":{},"published":"2026-11-15T07:16:49.253","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/f368f380-c003-4701-82be-19990fa69818/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
data/2026/CVE-2026-110960.json
+1
View File
@@ -0,0 +1 @@
{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Auth Armor","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.0.3","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Auth Armor WordPress plugin through 1.0.3 does not require authentication on several handlers available to logged-out users, which leak the site's stored API credentials and allow an unauthenticated attacker to reset an administrator's enrollment and take over that administrator account."}],"id":"CVE-2026-110960","lastModified":"2026-11-15T07:16:53.477","metrics":{},"published":"2026-11-15T07:16:53.477","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/84878a65-29f3-4cb9-96dd-b3f35baa21f0/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
data/2026/CVE-2026-110984.json
+1
View File
@@ -0,0 +1 @@
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"RegistrationMagic","vendor":"Unknown","versions":[{"lessThan":"6.1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The RegistrationMagic WordPress plugin before 6.1.0.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks."}],"id":"CVE-2026-110984","lastModified":"2026-11-15T07:16:53.600","metrics":{},"published":"2026-11-15T07:16:53.600","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/331347d3-bc62-4727-b80c-0c7cc5df6031/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
data/2026/CVE-2026-110987.json
+1
View File
@@ -0,0 +1 @@
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"RegistrationMagic","vendor":"Unknown","versions":[{"lessThan":"6.1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The RegistrationMagic WordPress plugin before 6.1.0.4 does not properly escape a user-supplied value before printing it inside an inline script block on several of its admin screens, allowing unauthenticated attackers to inject arbitrary JavaScript that executes in the session of an administrator who is tricked into opening a crafted link."}],"id":"CVE-2026-110987","lastModified":"2026-11-15T07:16:53.717","metrics":{},"published":"2026-11-15T07:16:53.717","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/2a4e7700-fecb-49e9-bd6f-6d36e785115a/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
data/2026/CVE-2026-110989.json
+1
View File
@@ -0,0 +1 @@
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"RegistrationMagic","vendor":"Unknown","versions":[{"lessThan":"6.1.0.4","status":"affected","version":"5.2.3.1","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The RegistrationMagic WordPress plugin before 6.1.0.4 does not verify ownership of the submitted email address before updating the associated WordPress user account, allowing unauthenticated attackers to overwrite the profile fields of arbitrary non-administrator users by submitting a public form that contains name and primary-email fields."}],"id":"CVE-2026-110989","lastModified":"2026-11-15T07:16:53.827","metrics":{},"published":"2026-11-15T07:16:53.827","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/3992979c-8808-4888-9e6a-658bf4f8c317/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
data/2026/CVE-2026-114451.json
+1
View File
@@ -0,0 +1 @@
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Membership Plugin","vendor":"Unknown","versions":[{"lessThan":"4.0.6","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Membership Plugin WordPress plugin before 4.0.6 does not perform any authorization or CSRF check before running a schema-altering database maintenance routine, allowing unauthenticated users to convert the Membership Plugin WordPress plugin before 4.0.6's own tables to a narrower character set, which irreversibly replaces every 4-byte character (such as emoji and some CJK characters) in the membership level, discount code and payment records with a question mark."}],"id":"CVE-2026-114451","lastModified":"2026-11-15T07:16:53.930","metrics":{},"published":"2026-11-15T07:16:53.930","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/74c09864-9f3e-4201-84ed-bf0aa562b500/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
data/2026/CVE-2026-114452.json
+1
View File
@@ -0,0 +1 @@
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Membership Plugin","vendor":"Unknown","versions":[{"lessThan":"4.0.6","status":"affected","version":"3.2.17","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Membership Plugin WordPress plugin before 4.0.6 does not verify that the membership referenced in a saved-card payment request belongs to the user making it, allowing subscriber-level members to disclose another member's Stripe payment client secret and attach a payment method of their choosing to another member's pending payment."}],"id":"CVE-2026-114452","lastModified":"2026-11-15T07:16:54.053","metrics":{},"published":"2026-11-15T07:16:54.053","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/2694318a-07b5-483c-a3f1-4511022c6d5d/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
data/2026/CVE-2026-116559.json
+1
View File
@@ -0,0 +1 @@
{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"A2Reviews","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.2.3","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The A2Reviews WordPress plugin through 1.2.3 does not properly verify authorization on several of its API command handlers, relying on a signature keyed on a value that is empty by default on an unconnected install, allowing unauthenticated attackers to modify A2Reviews WordPress plugin through 1.2.3 settings and product review metadata and to read non-public product metadata."}],"id":"CVE-2026-116559","lastModified":"2026-11-15T07:16:54.163","metrics":{},"published":"2026-11-15T07:16:54.163","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/313ed902-a4ad-46d2-9a84-3cbc94464dab/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
data/2026/CVE-2026-123707.json
+1
View File
@@ -0,0 +1 @@
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WPGraphQL","vendor":"Unknown","versions":[{"lessThan":"2.27.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WPGraphQL WordPress plugin before 2.27.1 does not restrict access to posts in custom non-public post statuses, allowing users with the Contributor role and above to read the content of other users' posts in those statuses."}],"id":"CVE-2026-123707","lastModified":"2026-11-15T07:16:54.283","metrics":{},"published":"2026-11-15T07:16:54.283","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/ae3506eb-c023-4af6-b3c0-5c2600b2b502/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
data/2026/CVE-2026-124671.json
+1
View File
@@ -0,0 +1 @@
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Burst Statistics","vendor":"Unknown","versions":[{"lessThan":"3.7.5","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Burst Statistics WordPress plugin before 3.7.5 does not enforce a shared report's date range on the analytics it serves to the report's share link, allowing anyone holding the link to read the report's statistics for any period the site retains rather than the period the report was shared for."}],"id":"CVE-2026-124671","lastModified":"2026-11-15T07:16:54.407","metrics":{},"published":"2026-11-15T07:16:54.407","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/e04841d2-547a-432a-a1c4-62b07c54e1b2/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
data/2026/CVE-2026-124673.json
+1
View File
@@ -0,0 +1 @@
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Burst Statistics","vendor":"Unknown","versions":[{"lessThan":"3.7.5","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Burst Statistics WordPress plugin before 3.7.5 does not check that a reported page view belongs to published content, nor check post status before listing post titles and links in its public statistics output, allowing unauthenticated attackers to disclose the titles and permalinks of draft, pending and private posts."}],"id":"CVE-2026-124673","lastModified":"2026-11-15T07:16:54.527","metrics":{},"published":"2026-11-15T07:16:54.527","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/88abcecb-e1cf-4e81-b8d0-2f222de897fc/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
data/2026/CVE-2026-124684.json
+1 -1
View File
@@ -1 +1 @@
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Escargot","vendor":"Samsung Open Source","versions":[{"lessThan":"8bc35b7b88f0f96c66a42aa965a1a710308b61d5","status":"affected","version":"0","versionType":"git"}]}],"source":"PSIRT@samsung.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"This issue can cause a heap-use-after-free when an embedder unloads a ReloadableString buffer while a previously returned raw character pointer remains in use. Successful triggering may cause the Escargot-based process to crash, resulting in a denial of service."}],"id":"CVE-2026-124684","lastModified":"2026-11-12T22:11:01.153","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.4,"impactScore":3.6,"source":"PSIRT@samsung.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124684","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-12T15:44:59.352976Z","version":"2.0.3"}}]},"published":"2026-11-09T12:16:38.290","references":[{"source":"PSIRT@samsung.com","url":"https://github.com/Samsung/escargot/commit/8bc35b7b88f0f96c66a42aa965a1a710308b61d5"}],"sourceIdentifier":"PSIRT@samsung.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"PSIRT@samsung.com","type":"Secondary"}]}
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Escargot","vendor":"Samsung Open Source","versions":[{"lessThan":"8bc35b7b88f0f96c66a42aa965a1a710308b61d5","status":"affected","version":"0","versionType":"git"}]}],"source":"PSIRT@samsung.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free vulnerability exists in Samsung Escargot 5.0.2 in the buffer-access paths for ReloadableString and CompressibleString. Internal raw character accessors and the public StringRef::stringBufferAccessData() API did not preserve the lifetime of the underlying buffer while it remained in use. As a result, idle unloading or garbage-collection compression could release the buffer and leave a stale pointer. Subsequent access may cause the process to crash or, under allocation-dependent conditions, expose limited contents of another heap allocation. The issue was addressed by adding buffer-lifetime reference tracking and removing unsafe raw character accessors."}],"id":"CVE-2026-124684","lastModified":"2026-11-15T08:17:20.153","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.7,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","version":"3.1"},"exploitabilityScore":1.4,"impactScore":4.2,"source":"PSIRT@samsung.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124684","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-12T15:44:59.352976Z","version":"2.0.3"}}]},"published":"2026-11-09T12:16:38.290","references":[{"source":"PSIRT@samsung.com","url":"https://github.com/Samsung/escargot/commit/8bc35b7b88f0f96c66a42aa965a1a710308b61d5"}],"sourceIdentifier":"PSIRT@samsung.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"PSIRT@samsung.com","type":"Secondary"}]}
data/2026/CVE-2026-127048.json
+1
View File
@@ -0,0 +1 @@
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Custom Block Builder","vendor":"Unknown","versions":[{"lessThan":"3.0.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Custom Block Builder WordPress plugin before 3.0.0 does not properly deny unauthorised requests to its REST routes, as its permission checks return a non-error response that WordPress treats as granted, allowing unauthenticated users to execute arbitrary PHP code on the server."}],"id":"CVE-2026-127048","lastModified":"2026-11-15T07:16:54.633","metrics":{},"published":"2026-11-15T07:16:54.633","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/b88c5a75-56ab-4722-8994-bbd6d97d2844/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
data/2026/CVE-2026-129443.json
+1
View File
@@ -0,0 +1 @@
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:itsourcecode:airline_reservation_system:*:*:*:*:*:*:*:*"],"product":"Airline Reservation System","vendor":"itsourcecode","versions":[{"status":"affected","version":"1.0"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was determined in itsourcecode Airline Reservation System 1.0. The impacted element is an unknown function of the file /admin/manage_user.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized."}],"id":"CVE-2026-129443","lastModified":"2026-11-15T08:17:21.797","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"PARTIAL","baseScore":6.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":8.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.4,"source":"cna@vuldb.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.1,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}]},"published":"2026-11-15T08:17:21.573","references":[{"source":"cna@vuldb.com","url":"https://github.com/huverse/submit/issues/1"},{"source":"cna@vuldb.com","url":"https://itsourcecode.com/"},{"source":"cna@vuldb.com","url":"https://vuldb.com/cve/CVE-2026-129443"},{"source":"cna@vuldb.com","url":"https://vuldb.com/submit/1044608"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/437456"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/437456/cti"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-74"},{"lang":"en","value":"CWE-89"}],"source":"cna@vuldb.com","type":"Primary"}]}
state/sync.json
+1 -1
View File
@@ -1 +1 @@
{"initial_complete":true,"last_run_counts":{"seen":1858,"skipped":2,"unchanged":1856,"written":0},"last_run_mode":"incremental","last_successful_end":"2026-11-15T06:42:23+00:00","schema_version":1,"since_year":2017,"source":"NVD CVE API 2.0","updated_at":"2026-11-15T06:47:38.951040+00:00"}
{"initial_complete":true,"last_run_counts":{"seen":1739,"skipped":2,"unchanged":1723,"written":14},"last_run_mode":"incremental","last_successful_end":"2026-11-15T08:42:21+00:00","schema_version":1,"since_year":2017,"source":"NVD CVE API 2.0","updated_at":"2026-11-15T08:47:34.571819+00:00"}