In YITH WooCommerce Membership Premium component for WooCommerce versions 2.33.0 and earlier a high severity vulnerability CVE-2026-32552 was detected. This vulnerability allows attackers to execute arbitrary SQL commands. To address this issue, users should upgrade YITH WooCommerce Membership Premium to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-32552.
Read more E-commerce
In Balbooa Forms component for Joomla versions prior to 2.4.3.2 a high severity vulnerability CVE-2026-67363 was detected. This vulnerability allows an attacker to tamper with payment amounts without authentication. To address this issue, users should upgrade Balbooa Forms to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-67363.
Read more CMS
In Flexible Subscriptions component for WordPress versions 1.8.1 and earlier a critical severity vulnerability CVE-2026-73364 was detected. This vulnerability allows attackers to inject malicious objects. To address this issue, users should upgrade Flexible Subscriptions to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-73364.
Read more CMS
In the Balbooa Forms component for Joomla versions 2.4.3.1 and earlier a critical severity vulnerability CVE-2026-67364 was detected. This vulnerability allows an unauthenticated attacker to execute arbitrary PHP code on the server. To address this issue, users should upgrade Balbooa Forms to version 2.4.3.2 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-67364.
Read more CMS
In Taxi Booking Manager for WooCommerce component for WooCommerce versions before 2.0.8 a medium severity vulnerability CVE-2026-73363 was detected. This vulnerability allows unauthenticated attackers to bypass access controls. To address this issue, users should upgrade Taxi Booking Manager for WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-73363.
Read more E-commerce
In Keycloak versions prior to the latest patch a medium severity vulnerability CVE-2026-19608 was detected. This vulnerability allows an attacker to potentially bypass group-based access control policies. To address this issue, users should upgrade Keycloak to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19608.
Read more Security
In Zabbix in affected versions a medium severity vulnerability CVE-2026-23935 was detected. This vulnerability allows an administrator to read out of bounds memory, leading to potential confidentiality loss. To address this issue, users should upgrade Zabbix to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-23935.
Read more Monitoring
In Keycloak a medium severity vulnerability CVE-2026-19608 was detected. This vulnerability allows an attacker to gain unauthorized access to protected resources. To address this issue, users should upgrade Keycloak to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19608.
Read more Security
In Zabbix version 7.4 a high severity vulnerability CVE-2026-23933 was detected. This vulnerability allows attackers to forge valid session cookies, potentially leading to unauthorized access. To address this issue, users should upgrade Zabbix to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-23933.
Read more Monitoring