In the Link Factory component for WordPress a critical severity vulnerability CVE-2026-15413 was detected. This vulnerability allows an attacker to gain unauthorized remote control over the website. To address this issue, users should upgrade Link Factory to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15413.
Read more CMSIn @fastify/busboy component for Node versions 3.1.0 through 3.2.0 a high severity vulnerability CVE-2026-19484 was detected. This vulnerability allows a remote unauthenticated attacker to stall the Node.js event loop. To address this issue, users should upgrade @fastify/busboy to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19484.
Read more Developer ToolsIn PPWP – Password Protect Pages component for WordPress versions 1.9.21 and earlier a medium severity vulnerability CVE-2026-3639 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts in pages. To address this issue, users should upgrade PPWP – Password Protect Pages to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-3639.
Read more CMSIn Ecwid by Lightspeed Ecommerce Shopping Cart component for WordPress versions before 7.0.9 a medium severity vulnerability CVE-2026-14332 was detected. This vulnerability allows any authenticated user to disconnect the store and take the storefront offline. To address this issue, users should upgrade Ecwid by Lightspeed Ecommerce Shopping Cart to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-14332.
Read more CMSIn Mattermost versions 11.9.0 and earlier, 11.8.4 and earlier, 11.7.7 and earlier, and 10.11.22 and earlier a medium severity vulnerability CVE-2026-14298 was detected. This vulnerability allows an authenticated user to cause a denial of service. To address this issue, users should upgrade Mattermost to version 10.11.23 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-14298.
Read more CommunicationIn Wallet System for WooCommerce component for WooCommerce versions before 2.7.10 a medium severity vulnerability CVE-2026-15045 was detected. This vulnerability allows authenticated customers to arbitrarily reduce their own order total without paying the merchant. To address this issue, users should upgrade Wallet System for WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15045.
Read more E-commerce