---METADATA---
VENDOR: Legion of the Bouncy Castle Inc.
PRODUCT: BC-JAVA, BC-LTS-JAVA, BC-FJA
AFFECTED_VERSIONS: BC-JAVA: 0 up to 1.85, BC-LTS-JAVA: 2.73.0 up to 2.73.12, BC-FJA: 1.0.0 up to 1.0.12, 2.0.0 up to 2.0.12, 2.1.0 up to 2.1.12
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in the Bouncy Castle library allows unauthenticated attackers to bypass integrity checks due to improper validation of integrity check values.

Executive Summary:
A critical integrity validation flaw in the Bouncy Castle library allows unauthenticated attackers to manipulate data, posing a severe risk to secure communications.

Vulnerability Details

CVE-ID: CVE-2026-59642

Affected Software: Legion of the Bouncy Castle Inc. BC-JAVA, BC-LTS-JAVA, and BC-FJA

Affected Versions: BC-JAVA: <1.85; BC-LTS-JAVA: <2.73.12; BC-FJA: <1.0.12, <2.0.12, <2.1.12

Vulnerability: This vulnerability, identified as CWE-354, involves the improper validation of integrity check values. It is remotely exploitable by an unauthenticated attacker, allowing for potential tampering with data streams.

Business Impact

Successful exploitation allows an attacker to bypass integrity protections, which could lead to unauthorized data modification without detection. With a CVSS score of 8.7, this vulnerability poses a high risk to data confidentiality and integrity, potentially undermining the entire security posture of the affected application.

Remediation Plan

Immediate Action: Update the affected Bouncy Castle libraries to the patched versions (BC-JAVA 1.85, BC-LTS-JAVA 2.73.12, or the corresponding fixed versions for BC-FJA) immediately.

Proactive Monitoring: Monitor for anomalous integrity check failures or unexpected behavior in cryptographic operations within system logs.

Compensating Controls: Implement strict input validation and additional integrity checks at the application level to supplement the compromised cryptographic library.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The nature of the flaw requires specific knowledge of the target's cryptographic implementation, but it remains a high priority for remediation.

Analyst Recommendation

The severity of this flaw necessitates an immediate update of the Bouncy Castle library to the latest secure versions. Security teams should verify that all applications incorporating these libraries are updated to mitigate the risk of data tampering and integrity loss.

---METADATA---
VENDOR: Legion of the Bouncy Castle Inc.
PRODUCT: BC-JAVA, BC-LTS-JAVA, BC-FJA
AFFECTED_VERSIONS: BC-JAVA: 0 up to 1.85, BC-LTS-JAVA: 2.73.0 up to 2.73.12, BC-FJA: 1.0.0 up to 1.0.7, 2.0.0 up to 2.0.7, 2.1.0 up to 2.1.7
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in the Bouncy Castle library allows unauthenticated attackers to bypass data authenticity verification due to insufficient checks.

Executive Summary:
A critical vulnerability in the Bouncy Castle cryptographic library permits unauthenticated attackers to bypass integrity protections, potentially compromising data authenticity.

Vulnerability Details

CVE-ID: CVE-2026-59641

Affected Software: Legion of the Bouncy Castle Inc. BC-JAVA, BC-LTS-JAVA, and BC-FJA

Affected Versions: BC-JAVA: <1.85; BC-LTS-JAVA: <2.73.12; BC-FJA: <1.0.7, <2.0.7, <2.1.7

Vulnerability: This is an instance of CWE-345, where the application fails to adequately verify data authenticity. The vulnerability is remotely exploitable by an unauthenticated attacker, as indicated by the CVSS vector AV:N/AC:L/AT:N/PR:N.

Business Impact

The inability to verify data authenticity can lead to the acceptance of malicious or tampered data as legitimate. Given the CVSS score of 8.7, this flaw represents a significant risk to systems relying on Bouncy Castle for secure communications, potentially resulting in unauthorized data modification or total compromise of cryptographic trust.

Remediation Plan

Immediate Action: Update the affected Bouncy Castle libraries to the latest versions (BC-JAVA 1.85, BC-LTS-JAVA 2.73.12, or the corresponding fixed versions for BC-FJA) provided by the vendor.

Proactive Monitoring: Review application logs for unusual cryptographic errors or failures in signature verification processes.

Compensating Controls: Ensure that downstream systems perform secondary integrity checks on incoming data packets where possible to detect unauthorized modifications.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its location in a fundamental cryptographic dependency.

Analyst Recommendation

Organizations using the Bouncy Castle library must prioritize upgrading their dependencies to the versions specified in the vendor advisory. Failure to address this vulnerability allows for the bypass of critical security controls, necessitating immediate patching across all affected development and production environments.

---METADATA---
VENDOR: Legion of the Bouncy Castle Inc.
PRODUCT: BC-JAVA, BC-LTS-JAVA, BC-FJA
AFFECTED_VERSIONS: BC-JAVA: 0 up to 1.85; BC-LTS-JAVA: 2.73.0 up to 2.73.12; BC-FJA: 1.0.0 up to 1.0.13, 2.0.0 up to 2.0.13, 2.1.0 up to 2.1.13
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A side-channel vulnerability in Bouncy Castle for Java, specifically an observable discrepancy, allows unauthenticated attackers to potentially leak sensitive information.

Executive Summary:
An observable discrepancy vulnerability in the Bouncy Castle library could allow unauthenticated attackers to perform side-channel attacks and leak sensitive information.

Vulnerability Details

CVE-ID: CVE-2026-59640

Affected Software: Legion of the Bouncy Castle Inc. BC-JAVA, BC-LTS-JAVA, and BC-FJA

Affected Versions: BC-JAVA: 0 up to 1.85; BC-LTS-JAVA: 2.73.0 up to 2.73.12; BC-FJA: 1.0.0 up to 1.0.13, 2.0.0 up to 2.0.13, 2.1.0 up to 2.1.13

Vulnerability: This vulnerability (CWE-203) involves an observable discrepancy in the library's processing, which is remotely exploitable by an unauthenticated attacker. Such discrepancies often facilitate side-channel attacks that can lead to the recovery of cryptographic keys or other sensitive data.

Business Impact

Side-channel vulnerabilities can lead to the silent exfiltration of sensitive cryptographic material, such as private keys or session secrets. Given the CVSS score of 8.7, this represents a major risk to data privacy and system security. Successful exploitation could allow attackers to decrypt historical or future traffic, leading to widespread data exposure.

Remediation Plan

Immediate Action: Update the Bouncy Castle library to the specified fixed version to eliminate the observable discrepancy.

Proactive Monitoring: Monitor for anomalous traffic patterns or timing variations in cryptographic operations that might suggest a side-channel attack is in progress.

Compensating Controls: Ensure that sensitive cryptographic operations are isolated and that systems are configured to minimize the exposure of timing information to external entities.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Side-channel attacks are often subtle and difficult to detect, making proactive patching the most effective defense.

Analyst Recommendation

The risk of information leakage via side-channel analysis necessitates immediate attention. Security teams should prioritize patching the Bouncy Castle library to ensure that cryptographic operations remain resilient against timing-based observation attacks.

---METADATA---
VENDOR: Digiwin
PRODUCT: EasyFlow .NET
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
Digiwin EasyFlow .NET contains a SQL injection vulnerability allowing unauthenticated remote attackers to manipulate database contents.

Executive Summary:
An unauthenticated SQL injection vulnerability in Digiwin EasyFlow .NET poses a critical risk of complete database compromise and unauthorized data manipulation.

Vulnerability Details

CVE-ID: CVE-2026-5964

Affected Software: Digiwin EasyFlow .NET

Affected Versions: See vendor advisory

Vulnerability: This is a SQL injection vulnerability that allows unauthenticated remote attackers to inject arbitrary SQL commands into the application. The flaw enables unauthorized parties to read, modify, or delete sensitive data stored within the backend database.

Business Impact

The exploitation of this vulnerability can result in the full compromise of the application's database, leading to unauthorized disclosure or destruction of sensitive corporate information. With a CVSS score of 9.8, this flaw represents a critical risk to business operations, data integrity, and compliance requirements.

Remediation Plan

Immediate Action: Update Digiwin EasyFlow .NET to the latest available version provided by the vendor to remediate the underlying code vulnerability.

Proactive Monitoring: Monitor database access logs for unusual patterns, such as unexpected query structures, unauthorized data export attempts, or large-scale record deletions.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated SQL injection protection signatures to detect and block malicious payloads directed at the application.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 20, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical CVSS severity and the unauthenticated nature of this vulnerability, immediate patching is required. Organizations should prioritize updating their Digiwin EasyFlow .NET instances to prevent potential data breaches and unauthorized system access.

---METADATA---
VENDOR: Legion of the Bouncy Castle Inc.
PRODUCT: BC-JAVA, BC-LTS-JAVA, BC-FJA
AFFECTED_VERSIONS: BC-JAVA: 0 up to 1.85; BC-LTS-JAVA: 2.73.0 up to 2.73.12; BC-FJA: 1.0.0 up to 1.0.12, 2.0.0 up to 2.0.12, 2.1.0 up to 2.1.12
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in Bouncy Castle for Java involving improper verification of cryptographic signatures allows attackers to potentially bypass security controls.

Executive Summary:
A critical cryptographic signature verification flaw in the Bouncy Castle library allows unauthenticated attackers to potentially bypass security mechanisms.

Vulnerability Details

CVE-ID: CVE-2026-59639

Affected Software: Legion of the Bouncy Castle Inc. BC-JAVA, BC-LTS-JAVA, and BC-FJA

Affected Versions: BC-JAVA: 0 up to 1.85; BC-LTS-JAVA: 2.73.0 up to 2.73.12; BC-FJA: 1.0.0 up to 1.0.12, 2.0.0 up to 2.0.12, 2.1.0 up to 2.1.12

Vulnerability: This flaw (CWE-347) permits the improper verification of cryptographic signatures. It is remotely exploitable by an unauthenticated attacker, enabling the potential acceptance of forged or malicious signatures.

Business Impact

The inability to correctly verify cryptographic signatures can undermine the foundation of secure communications and identity verification within an organization. With a CVSS score of 8.7, the risk of unauthorized access or the acceptance of fraudulent data is high. This can lead to severe operational disruption and the compromise of secure trust chains across the enterprise.

Remediation Plan

Immediate Action: Update affected Bouncy Castle library dependencies to the patched versions as recommended by the vendor.

Proactive Monitoring: Review security logs for failures in signature verification or unusual authentication patterns that may indicate an attempt to exploit this flaw.

Compensating Controls: Implement strict certificate validation and ensure that all incoming data is processed through hardened, secondary verification layers.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's location within the signature verification routine makes it highly susceptible to exploitation if an attacker can intercept or provide malicious signed data.

Analyst Recommendation

The vulnerability poses a severe threat to the trust model of any application relying on the Bouncy Castle library for signature verification. Organizations must apply the vendor provided patches as an immediate priority to prevent potential bypass of critical security controls.

---METADATA---
VENDOR: Legion of the Bouncy Castle
PRODUCT: BC-JAVA
AFFECTED_VERSIONS: BC-JAVA: 1.61-1.84, BC-LTS-JAVA: 2.73.0-2.73.11, BC-FJA: 1.0.7-1.0.23, 2.0.0-2.0.23, 2.1.0-2.1.23
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Bouncy Castle for Java has an insecure default configuration for the JSSE hostname verifier, which incorrectly enables CN-fallback.

Executive Summary:
A critical security flaw in Bouncy Castle for Java improperly validates hostnames, creating an opportunity for attackers to perform man-in-the-middle attacks.

Vulnerability Details

CVE-ID: CVE-2026-59638

Affected Software: Legion of the Bouncy Castle BC-JAVA

Affected Versions: BC-JAVA 1.61 up to 1.85, BC-LTS-JAVA 2.73.0 up to 2.73.12, BC-FJA 1.0.7 up to 1.0.24, 2.0.0 up to 2.0.24, and 2.1.0 up to 2.1.24

Vulnerability: This is an improper validation of certificates with host mismatch (CWE-297) caused by the JSSE hostname verifier enabling CN-fallback by default. This is exploitable by an unauthenticated remote attacker.

Business Impact

The vulnerability allows attackers to impersonate legitimate services by exploiting the fallback mechanism during hostname verification. With a CVSS score of 9.3, the potential for unauthorized data access and traffic redirection poses a significant risk to organizational security posture.

Remediation Plan

Immediate Action: Update to the latest versions: BC-JAVA 1.85, BC-LTS-JAVA 2.73.12, or the relevant BC-FJA release (1.0.24, 2.0.24, or 2.1.24).

Proactive Monitoring: Monitor network traffic for suspicious redirection patterns or certificate mismatches that may indicate an ongoing man-in-the-middle attempt.

Compensating Controls: Force explicit hostname verification settings in application code where possible to override the insecure default behavior while awaiting patching.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 2, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is highly exploitable in environments that rely on default library configurations.

Analyst Recommendation

The reliance on insecure defaults makes this a high-priority update. Administrators should audit their application dependencies and apply the updates as soon as they are available to prevent exploitation.

---METADATA---
VENDOR: Digiwin
PRODUCT: EasyFlow .NET
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
Digiwin EasyFlow .NET contains a SQL injection vulnerability allowing unauthenticated remote attackers to manipulate database contents.

Executive Summary:
An unauthenticated SQL injection vulnerability in Digiwin EasyFlow .NET poses a critical risk of complete database compromise and unauthorized data manipulation.

Vulnerability Details

CVE-ID: CVE-2026-5963

Affected Software: Digiwin EasyFlow .NET

Affected Versions: See vendor advisory

Vulnerability: This is a SQL injection vulnerability that allows unauthenticated remote attackers to inject arbitrary SQL commands into the application. The flaw enables unauthorized parties to read, modify, or delete sensitive data stored within the backend database.

Business Impact

The exploitation of this vulnerability can result in the full compromise of the application's database, leading to unauthorized disclosure or destruction of sensitive corporate information. With a CVSS score of 9.8, this flaw represents a critical risk to business operations, data integrity, and compliance requirements.

Remediation Plan

Immediate Action: Update Digiwin EasyFlow .NET to the latest available version provided by the vendor to remediate the underlying code vulnerability.

Proactive Monitoring: Monitor database access logs for unusual patterns, such as unexpected query structures, unauthorized data export attempts, or large-scale record deletions.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated SQL injection protection signatures to detect and block malicious payloads directed at the application.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 20, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical CVSS severity and the unauthenticated nature of this vulnerability, immediate patching is required. Organizations should prioritize updating their Digiwin EasyFlow .NET instances to prevent potential data breaches and unauthorized system access.

---METADATA---
VENDOR: Roland Barker
PRODUCT: Participants Database
AFFECTED_VERSIONS: n/a through 2.7.8.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Roland Barker Participants Database plugin for WordPress contains an unauthenticated arbitrary file deletion vulnerability due to improper path validation.

Executive Summary:
A critical path traversal vulnerability in the Participants Database plugin allows unauthenticated attackers to delete arbitrary files from the host server.

Vulnerability Details

CVE-ID: CVE-2026-59555

Affected Software: Roland Barker Participants Database

Affected Versions: n/a through 2.7.8.3

Vulnerability: This vulnerability is classified as CWE-22, specifically an improper limitation of a pathname to a restricted directory. An unauthenticated attacker can exploit this flaw to delete files on the server filesystem, potentially causing complete system disruption.

Business Impact

The ability to perform arbitrary file deletion represents a critical risk to business continuity and data integrity. Successful exploitation could lead to the deletion of core system files, configuration files, or database components, resulting in total application downtime and potential loss of data. The CVSS score of 10.0 reflects the extreme severity and the potential for complete system compromise.

Remediation Plan

Immediate Action: Update the Participants Database plugin to version 2.7.8.4 or later immediately.

Proactive Monitoring: Review web server and application error logs for suspicious file system access patterns or repetitive requests targeting non-public directories.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to block directory traversal sequences, such as dot-dot-slash patterns, in URL parameters.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 23, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its unauthenticated nature and the high impact of file deletion.

Analyst Recommendation

Given the critical CVSS score and the ease of exploitation, this vulnerability poses an immediate threat to any environment hosting the affected plugin. Administrators must prioritize updating to version 2.7.8.4 to resolve the underlying path traversal issue and prevent unauthorized file system modification.

---METADATA---
VENDOR: rtCamp
PRODUCT: rtMedia for WordPress, BuddyPress and bbPress
AFFECTED_VERSIONS: n/a through 4.7.10
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the rtMedia for WordPress plugin allows authenticated subscribers to execute arbitrary database queries.

Executive Summary:
An authenticated SQL injection vulnerability in the rtMedia for WordPress plugin could allow low-privileged subscribers to compromise sensitive database information.

Vulnerability Details

CVE-ID: CVE-2026-59551

Affected Software: rtCamp rtMedia for WordPress, BuddyPress and bbPress

Affected Versions: n/a through 4.7.10

Vulnerability: The plugin fails to properly sanitize user-supplied input before using it in SQL commands. This flaw is exploitable by authenticated users with subscriber-level privileges, as indicated by the CVSS PR:L vector.

Business Impact

Successful exploitation allows an attacker to perform unauthorized database operations, potentially leading to the exposure of sensitive user data or site configuration details. Given the CVSS score of 8.5, this high-severity flaw poses a significant risk to the confidentiality of the WordPress environment.

Remediation Plan

Immediate Action: Update the rtMedia for WordPress, BuddyPress and bbPress plugin to version 4.7.11 or later.

Proactive Monitoring: Review database error logs for unusual query patterns or syntax errors that may indicate injection attempts.

Compensating Controls: Deploy a Web Application Firewall with SQL injection protection rules enabled to filter malicious requests targeting this plugin.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. SQL injection remains a high-risk vector that can lead to full database compromise if not addressed.

Analyst Recommendation

The vulnerability represents a significant risk to the integrity and confidentiality of the WordPress database. Administrators should prioritize updating the rtMedia plugin to version 4.7.11 immediately to eliminate the injection flaw.

---METADATA---
VENDOR: Strategy11 Team
PRODUCT: AWP Classifieds
AFFECTED_VERSIONS: n/a through 4.4.7
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An unauthenticated SQL injection vulnerability in AWP Classifieds allows remote attackers to execute arbitrary SQL commands via the plugin, potentially leading to unauthorized database access.

Executive Summary:
The AWP Classifieds plugin for WordPress is affected by a critical unauthenticated SQL injection vulnerability that allows remote attackers to compromise backend database integrity.

Vulnerability Details

CVE-ID: CVE-2026-59550

Affected Software: Strategy11 Team AWP Classifieds

Affected Versions: n/a through 4.4.7

Vulnerability: This is a classic SQL injection flaw (CWE-89) where the application fails to properly sanitize user-supplied input before using it in database queries. Because the vulnerability is unauthenticated, any remote attacker can interact with the plugin without requiring a login or administrative session.

Business Impact

Successful exploitation of this vulnerability can result in the full exposure of sensitive database contents, including user credentials, personal information, or configuration data. Given the CVSS score of 9.3, this flaw poses a severe risk to data confidentiality and application integrity, necessitating immediate attention to prevent unauthorized data exfiltration.

Remediation Plan

Immediate Action: Update the WordPress AWP Classifieds plugin to version 4.4.8 or later immediately to resolve the vulnerable code path.

Proactive Monitoring: Review web server and database logs for anomalous query strings or patterns that include SQL syntax characters, such as single quotes or UNION statements.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting WordPress plugins.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its unauthenticated nature and the prevalence of automated scanning tools used by threat actors to identify such vulnerabilities.

Analyst Recommendation

This vulnerability represents a critical risk to any site hosting the AWP Classifieds plugin. Administrators should prioritize updating to version 4.4.8 without delay, as the lack of authentication requirements makes this an ideal target for automated exploitation campaigns.

---METADATA---
VENDOR: Inrove Software and Internet Services
PRODUCT: BiEticaret
AFFECTED_VERSIONS: < v3.3.57
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
BiEticaret is vulnerable to SQL injection, allowing unauthenticated attackers to execute arbitrary SQL commands against the database.

Executive Summary:
An SQL injection vulnerability in Inrove Software and Internet Services BiEticaret allows remote, unauthenticated attackers to compromise sensitive database information.

Vulnerability Details

CVE-ID: CVE-2026-5955

Affected Software: Inrove Software and Internet Services BiEticaret

Affected Versions: < v3.3.57

Vulnerability: The application fails to properly neutralize special elements within SQL commands, enabling SQL injection. This allows an unauthenticated attacker to manipulate database queries, potentially leading to unauthorized data extraction, modification, or total destruction of the database contents.

Business Impact

With a CVSS score of 9.8, this vulnerability is critical. It provides an attacker with the ability to bypass application security controls to access, steal, or corrupt sensitive customer and business data, which could lead to significant financial loss and severe reputational damage.

Remediation Plan

Immediate Action: Update the BiEticaret software to version v3.3.57 or later to address the SQL injection flaw.

Proactive Monitoring: Monitor database query logs for unusual or highly complex query structures that may indicate automated SQL injection attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets to detect and block common SQL injection attack patterns as an immediate, temporary mitigation.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jul 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, the criticality of SQL injection flaws necessitates immediate remediation.

Analyst Recommendation

SQL injection is a severe security risk that can lead to total database compromise. It is imperative that users of the BiEticaret platform update to the patched version immediately to secure their database environment against potential exploitation.

---METADATA---
VENDOR: rtCamp
PRODUCT: rtMedia for WordPress, BuddyPress and bbPress
AFFECTED_VERSIONS: n/a through 4.7.10
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An unauthenticated SQL injection vulnerability exists in the rtMedia for WordPress plugin, allowing attackers to manipulate database queries via vulnerable parameters.

Executive Summary:
A critical unauthenticated SQL injection vulnerability in the rtMedia for WordPress, BuddyPress and bbPress plugin exposes databases to unauthorized data access and potential compromise.

Vulnerability Details

CVE-ID: CVE-2026-59549

Affected Software: rtCamp rtMedia for WordPress, BuddyPress and bbPress

Affected Versions: n/a through 4.7.10

Vulnerability: The plugin fails to properly sanitize user-supplied input before incorporating it into SQL queries. This allows an unauthenticated remote attacker to execute arbitrary SQL commands against the underlying WordPress database.

Business Impact

Successful exploitation allows an attacker to bypass authentication and extract sensitive information from the database, such as user credentials, personal data, or configuration details. With a CVSS score of 9.3, this vulnerability represents a critical risk to data confidentiality and integrity, potentially leading to a full site takeover or significant regulatory non-compliance.

Remediation Plan

Immediate Action: Update the rtMedia for WordPress, BuddyPress and bbPress plugin to version 4.7.11 or later immediately.

Proactive Monitoring: Review database error logs and web server access logs for anomalous SQL syntax patterns or unexpected query execution attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets designed to detect and block common SQL injection payloads targeted at WordPress plugins.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly dangerous due to its unauthenticated nature and the high technical impact associated with SQL injection.

Analyst Recommendation

Given the critical CVSS severity of 9.3 and the ease of exploitation for unauthenticated attackers, immediate patching is required. Administrators should prioritize updating the rtMedia plugin across all affected WordPress installations to prevent unauthorized data exposure and potential site compromise.

---METADATA---
VENDOR: Byteflows
PRODUCT: Byteflows Travel & Hotel Booking
AFFECTED_VERSIONS: n/a through 1.0.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Byteflows Travel & Hotel Booking plugin for WordPress is susceptible to an unauthenticated sensitive data exposure vulnerability, allowing unauthorized access to restricted system information.

Executive Summary:
An unauthenticated sensitive data exposure flaw in the Byteflows Travel & Hotel Booking plugin presents a high risk of unauthorized information disclosure.

Vulnerability Details

CVE-ID: CVE-2026-59548

Affected Software: Byteflows Byteflows Travel & Hotel Booking

Affected Versions: n/a through 1.0.0

Vulnerability: This vulnerability is an exposure of sensitive system information to an unauthorized control sphere, categorized as CWE-497. The flaw allows an unauthenticated attacker to retrieve sensitive data from the application without requiring valid credentials.

Business Impact

Successful exploitation leads to the unauthorized disclosure of sensitive data, which may include customer booking details, system configuration, or internal business logic. With a CVSS score of 7.5, the impact is significant, potentially leading to privacy violations, regulatory non-compliance, and reputational damage.

Remediation Plan

Immediate Action: Update the Byteflows Travel & Hotel Booking plugin to version 1.0.1 or later immediately.

Proactive Monitoring: Review application logs for anomalous access requests targeting plugin files or directories that should be restricted to authenticated users.

Compensating Controls: Utilize a Web Application Firewall (WAF) to restrict external access to sensitive plugin endpoints and monitor for unauthorized data retrieval patterns.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of authentication requirements makes this vulnerability highly accessible to remote attackers.

Analyst Recommendation

This vulnerability represents a significant security oversight that exposes sensitive information to the public internet. Organizations using this plugin should prioritize updating to the latest version to prevent potential data breaches. Immediate patching is the only effective way to remediate this exposure.

---METADATA---
VENDOR: John Darrel
PRODUCT: Hide My WP Ghost
AFFECTED_VERSIONS: n/a through 7.0.06
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A broken authentication vulnerability in the Hide My WP Ghost WordPress plugin allows unauthorized access due to improper user-controlled key validation.

Executive Summary:
The Hide My WP Ghost plugin for WordPress is affected by an authentication bypass flaw, which could allow an unauthenticated attacker to gain unauthorized access to protected features.

Vulnerability Details

CVE-ID: CVE-2026-59546

Affected Software: John Darrel Hide My WP Ghost

Affected Versions: n/a through 7.0.06

Vulnerability: The plugin suffers from an authorization bypass via user-controlled keys (CWE-639). This vulnerability allows an unauthenticated attacker to manipulate parameters to bypass security controls, as indicated by the CVSS vector AV:N/PR:N.

Business Impact

Successful exploitation allows an attacker to bypass authentication mechanisms, potentially leading to unauthorized administrative actions or data exposure. With a CVSS score of 7.4, this vulnerability represents a significant risk to the integrity and confidentiality of the WordPress environment.

Remediation Plan

Immediate Action: Update the Hide My WP Ghost plugin to version 7.0.07 or later immediately to resolve the underlying authorization flaw.

Proactive Monitoring: Review WordPress access logs for unusual administrative activity or requests originating from unexpected IP addresses.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to block suspicious requests targeting plugin authentication parameters.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable by remote, unauthenticated actors, making prompt patching critical.

Analyst Recommendation

Given the high severity of this authentication bypass, administrators must prioritize updating the plugin to the latest version. Failure to remediate this vulnerability leaves the application susceptible to unauthorized access and potential compromise of critical site settings.

---METADATA---
VENDOR: miniOrange
PRODUCT: Discord Integration Plugin
AFFECTED_VERSIONS: n/a through 2.2.4
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An unauthenticated authentication bypass vulnerability exists in the miniOrange Discord Integration plugin for WordPress, allowing unauthorized access to affected systems.

Executive Summary:
The miniOrange Discord Integration plugin for WordPress is vulnerable to an authentication bypass flaw that could allow unauthenticated attackers to compromise the system.

Vulnerability Details

CVE-ID: CVE-2026-59545

Affected Software: miniOrange Discord Integration

Affected Versions: n/a through 2.2.4

Vulnerability: This is an authentication bypass vulnerability (CWE-288) occurring in the plugin, which allows unauthenticated remote attackers to circumvent security controls.

Business Impact

Successful exploitation of this vulnerability could lead to a complete compromise of the affected WordPress site. Given the CVSS score of 8.1, this flaw presents a high risk for unauthorized data access, potential administrative takeover, and loss of system integrity.

Remediation Plan

Immediate Action: Update the miniOrange Discord Integration plugin to version 2.2.5 or later immediately.

Proactive Monitoring: Review WordPress access logs for unusual authentication patterns or suspicious requests originating from unauthorized IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rules to detect and block common authentication bypass patterns directed at WordPress plugins.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of July 24, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its unauthenticated nature, making prompt patching essential.

Analyst Recommendation

The high severity of this vulnerability necessitates immediate attention. Administrators must prioritize updating the miniOrange Discord Integration plugin to version 2.2.5 to eliminate the authentication bypass risk and prevent potential unauthorized access to the environment.

---METADATA---
VENDOR: Thrive Themes
PRODUCT: Thrive Quiz Builder
AFFECTED_VERSIONS: 10.9.3.0 and prior
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Thrive Quiz Builder contains an unauthenticated PHP Object Injection vulnerability in versions 10.9.3.0 and below, allowing remote attackers to execute arbitrary code via deserialization.

Executive Summary:
A critical unauthenticated PHP Object Injection vulnerability in Thrive Quiz Builder allows remote attackers to achieve full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-59544

Affected Software: Thrive Themes Thrive Quiz Builder

Affected Versions: 10.9.3.0 and prior

Vulnerability: This vulnerability involves CWE-502, Deserialization of Untrusted Data. The application fails to properly validate serialized PHP objects, allowing an unauthenticated attacker to inject malicious objects that lead to remote code execution.

Business Impact

Successful exploitation of this vulnerability grants an attacker full control over the affected WordPress installation. Given the CVSS score of 9.8, this represents a critical risk that could lead to complete data exfiltration, site defacement, and the deployment of persistent backdoors within the hosting environment.

Remediation Plan

Immediate Action: Update the Thrive Quiz Builder plugin to version 10.9.3.1 or the latest available release immediately.

Proactive Monitoring: Review web server access logs for unusual POST requests containing serialized PHP strings or unexpected file modifications in the WordPress directory.

Compensating Controls: Deploy a Web Application Firewall (WAF) configured to inspect and block malicious serialized PHP payloads targeting plugin endpoints.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 23, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the lack of required authentication, making it a high-priority target for automated exploit scanning.

Analyst Recommendation

This vulnerability is classified as critical due to the potential for unauthenticated remote code execution. Administrators must prioritize updating the Thrive Quiz Builder plugin to at least version 10.9.3.1. Failure to patch will leave the application exposed to trivial exploitation by remote actors.

---METADATA---
VENDOR: WPLake
PRODUCT: Advanced Views
AFFECTED_VERSIONS: n/a through 3.8.11
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The WPLake Advanced Views WordPress plugin contains a code injection vulnerability allowing remote code execution for authenticated subscribers.

Executive Summary:
A critical remote code execution vulnerability in the WPLake Advanced Views plugin allows authenticated subscribers to execute arbitrary code on the underlying server.

Vulnerability Details

CVE-ID: CVE-2026-59543

Affected Software: WPLake Advanced Views

Affected Versions: n/a through 3.8.11

Vulnerability: The plugin is susceptible to CWE-94, which is improper control of generation of code, specifically code injection. The vulnerability is exploitable by an attacker with subscriber-level privileges, meaning a low-privileged authenticated user can achieve full system compromise.

Business Impact

Successful exploitation grants an attacker full control over the WordPress environment and the hosting server. Given the CVSS score of 9.9, this vulnerability poses an extreme risk of complete data loss, unauthorized administrative access, and potential lateral movement within the hosting infrastructure.

Remediation Plan

Immediate Action: Update the WPLake Advanced Views plugin to version 3.9.0 or the latest available version immediately.

Proactive Monitoring: Review web server access logs for unusual requests originating from authenticated subscriber accounts that target plugin-specific endpoints.

Compensating Controls: Deploy a Web Application Firewall (WAF) to block malicious payloads targeting WordPress plugin code injection vectors.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 23, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the exploit requires low-level authentication, the high severity of the impact necessitates immediate patching.

Analyst Recommendation

This vulnerability represents a severe threat to the integrity and confidentiality of the WordPress installation. Administrators must prioritize updating the Advanced Views plugin to version 3.9.0 without delay to neutralize the risk of remote code execution.

---METADATA---
VENDOR: WP Chill
PRODUCT: Kali Forms
AFFECTED_VERSIONS: n/a through 2.4.18
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Kali Forms plugin for WordPress allows authenticated subscribers to perform arbitrary file deletion via path traversal.

Executive Summary:
An arbitrary file deletion vulnerability in the WP Chill Kali Forms plugin allows authenticated subscribers to potentially disrupt system operations.

Vulnerability Details

CVE-ID: CVE-2026-59542

Affected Software: WP Chill Kali Forms

Affected Versions: n/a through 2.4.18

Vulnerability: This vulnerability is an improper limitation of a pathname to a restricted directory (CWE-22), commonly known as path traversal. The flaw allows a subscriber, who possesses low-level authenticated access, to delete arbitrary files on the server hosting the WordPress installation.

Business Impact

Successful exploitation of this vulnerability could lead to significant system instability or downtime if critical configuration or core files are deleted. While the CVSS score of 7.7 indicates a high severity rating, the requirement for low-level subscriber authentication limits the initial attack surface to existing users. However, the impact on availability is severe due to the potential for permanent data loss or service disruption.

Remediation Plan

Immediate Action: Update the WordPress Kali Forms plugin to version 2.4.19 or later to incorporate the necessary security fixes.

Proactive Monitoring: Monitor server access logs for suspicious file deletion patterns or requests containing path traversal sequences, such as dot-dot-slash patterns.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to block malicious path traversal attempts directed at plugin-specific endpoints.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 24, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous because it allows low-privileged users to modify the filesystem state, which can be leveraged for denial-of-service attacks.

Analyst Recommendation

Given the potential for unauthorized file deletion, administrators should prioritize updating the Kali Forms plugin immediately. Organizations should verify that all plugins are updated to the latest vendor-supplied versions to prevent exploitation of this high-severity path traversal flaw.

---METADATA---
VENDOR: Hakan Ozevin
PRODUCT: WP BASE Booking
AFFECTED_VERSIONS: n/a through 6.3.1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The WP BASE Booking WordPress plugin contains a privilege escalation vulnerability that allows authenticated users with subscriber access to elevate their privileges.

Executive Summary:
A critical privilege escalation vulnerability in the WP BASE Booking WordPress plugin allows authenticated users to gain unauthorized administrative access to the platform.

Vulnerability Details

CVE-ID: CVE-2026-59541

Affected Software: Hakan Ozevin WP BASE Booking

Affected Versions: n/a through 6.3.1

Vulnerability: This vulnerability is an incorrect privilege assignment (CWE-266) within the plugin, allowing an attacker who is already authenticated as a low-privileged subscriber to perform unauthorized actions or escalate their account privileges.

Business Impact

The ability for a low-privileged user to escalate to administrative status poses a severe risk to the integrity and confidentiality of the entire WordPress site. An attacker who gains administrative control could modify content, inject malicious code, or exfiltrate sensitive customer booking data, leading to significant reputational damage and potential regulatory non-compliance. The CVSS score of 8.8 reflects the high severity of this risk in an enterprise environment.

Remediation Plan

Immediate Action: Update the WP BASE Booking plugin to version 6.3.2 or later immediately.

Proactive Monitoring: Review user account activity logs for anomalous creations of new administrative accounts or unexpected changes to existing user roles.

Compensating Controls: Implement a Web Application Firewall (WAF) to filter malicious requests targeting known plugin vulnerabilities if an immediate update is not feasible.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 24, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the ease of exploitation once an attacker has established a basic user session.

Analyst Recommendation

Given the high CVSS score and the nature of the vulnerability, organizations should prioritize patching this plugin immediately. Failure to update allows any registered subscriber to potentially compromise the entire site, making this a critical maintenance task for all administrators.

---METADATA---
VENDOR: Cozy Vision Technologies Pvt.
PRODUCT: SMS Alert Order Notifications
AFFECTED_VERSIONS: n/a through 3.9.6
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The SMS Alert Order Notifications WordPress plugin contains an unauthenticated privilege escalation vulnerability that allows attackers to gain unauthorized administrative access.

Executive Summary:
An unauthenticated privilege escalation vulnerability in the SMS Alert Order Notifications plugin poses a critical risk to WordPress site integrity.

Vulnerability Details

CVE-ID: CVE-2026-59540

Affected Software: Cozy Vision Technologies Pvt. SMS Alert Order Notifications

Affected Versions: 3.9.6 and earlier

Vulnerability: The plugin fails to properly restrict access to sensitive functions, resulting in an incorrect privilege assignment (CWE-266). This allows an unauthenticated attacker to escalate their privileges within the WordPress environment.

Business Impact

Successful exploitation grants an attacker administrative control over the affected WordPress installation. This can lead to total site compromise, including the ability to install malicious plugins, exfiltrate user data, or deface the web presence. The CVSS score of 9.8 reflects the high severity of full administrative account takeover.

Remediation Plan

Immediate Action: Update the SMS Alert Order Notifications plugin to version 3.9.7 or later.

Proactive Monitoring: Monitor WordPress user accounts for the creation of unauthorized administrative users or suspicious changes to existing account permissions.

Compensating Controls: If an update cannot be applied immediately, deactivate the plugin to prevent exploitation until the patch is implemented.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of Jul 23, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Per CISA's SSVC assessment, there is no confirmed active exploitation, though the flaw is inherently automatable.

Analyst Recommendation

This vulnerability is critical due to the potential for total site takeover. Administrators should verify their current version and update to 3.9.7 immediately to remove the escalation vector.

---METADATA---
VENDOR: Cozmoslabs
PRODUCT: Paid Member Subscriptions
AFFECTED_VERSIONS: n/a through 3.0.7
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Paid Member Subscriptions plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) flaw, allowing unauthenticated attackers to manipulate user-controlled keys.

Executive Summary:
An IDOR vulnerability in the Cozmoslabs Paid Member Subscriptions plugin allows unauthenticated attackers to bypass authorization controls, posing a significant risk to data integrity.

Vulnerability Details

CVE-ID: CVE-2026-59539

Affected Software: Cozmoslabs Paid Member Subscriptions

Affected Versions: n/a through 3.0.7

Vulnerability: This vulnerability is an Insecure Direct Object Reference (IDOR) flaw, categorized as CWE-639. It occurs because the software fails to perform proper capability checks on user-controlled keys, allowing an unauthenticated attacker to perform unauthorized operations.

Business Impact

The ability for an unauthenticated user to manipulate objects through IDOR can lead to unauthorized modification of membership records or subscription data. With a CVSS score of 7.5, this high-severity flaw could result in significant business disruption, loss of revenue, and potential compromise of customer account integrity.

Remediation Plan

Immediate Action: Update the Paid Member Subscriptions plugin to version 3.0.8 or later to incorporate the necessary security patches.

Proactive Monitoring: Monitor server access logs for unusual patterns involving membership modification endpoints or unexpected POST requests from unauthenticated sessions.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious requests targeting plugin-specific parameters that facilitate object access.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its unauthenticated nature, which allows for remote, automated exploitation.

Analyst Recommendation

Given the high severity of this IDOR vulnerability, administrators must treat this as a priority update. Failure to patch allows unauthenticated actors to bypass access controls, potentially leading to unauthorized data manipulation. Apply the update to version 3.0.8 immediately to secure your WordPress environment.

---METADATA---
VENDOR: Ruben Garcia
PRODUCT: GamiPress
AFFECTED_VERSIONS: n/a through 7.9.7
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A critical, unauthenticated SQL injection vulnerability exists in the GamiPress plugin, enabling remote attackers to manipulate database queries.

Executive Summary:
An unauthenticated SQL injection vulnerability in the Ruben Garcia GamiPress plugin poses a critical risk to data integrity and confidentiality.

Vulnerability Details

CVE-ID: CVE-2026-59538

Affected Software: Ruben Garcia GamiPress

Affected Versions: n/a through 7.9.7

Vulnerability: This is an SQL injection vulnerability where the plugin fails to sanitize input, allowing an unauthenticated remote attacker to execute arbitrary SQL commands. This flaw is reachable via public-facing network requests.

Business Impact

With a CVSS score of 9.3, this vulnerability represents a significant threat to organizational security. An attacker could extract sensitive data, modify database records, or potentially gain further access to the hosting environment, leading to severe business disruption and loss of trust.

Remediation Plan

Immediate Action: Update the GamiPress plugin to version 7.9.8 or later to resolve the underlying code vulnerability.

Proactive Monitoring: Audit application logs for unusual query patterns or unexpected database errors that may indicate an attempt to exploit this flaw.

Compensating Controls: Implement a Web Application Firewall (WAF) to block requests containing common SQL injection signatures, providing temporary protection until the patch is applied.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly exploitable due to the lack of required authentication.

Analyst Recommendation

The severity of this issue demands prompt attention. Administrators must ensure that the GamiPress plugin is updated to version 7.9.8 or higher immediately to protect the system from potential exploitation. Monitoring for signs of unauthorized database access is also advised until the update is confirmed as successful.

---METADATA---
VENDOR: Sender
PRODUCT: Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce
AFFECTED_VERSIONS: n/a through 2.10.22
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An SQL injection vulnerability in the Sender WordPress plugin allows authenticated administrators to execute arbitrary SQL commands via improper input neutralization.

Executive Summary:
An authenticated SQL injection vulnerability in the Sender WordPress plugin could allow an administrator to compromise database integrity or access sensitive information.

Vulnerability Details

CVE-ID: CVE-2026-59537

Affected Software: Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce

Affected Versions: n/a through 2.10.22

Vulnerability: This is an improper neutralization of special elements used in an SQL command (CWE-89). The vulnerability requires high privileges (authenticated administrator) to exploit, allowing an attacker to manipulate backend database queries.

Business Impact

Successful exploitation allows an attacker with administrative access to perform unauthorized database operations, potentially leading to data exfiltration or corruption. While the CVSS score of 7.6 reflects a high severity, the requirement for administrative privileges limits the attack surface to existing internal users or compromised accounts.

Remediation Plan

Immediate Action: Update the Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin to version 2.10.23 or higher.

Proactive Monitoring: Review database query logs for anomalous or unauthorized syntax patterns that deviate from standard plugin operations.

Compensating Controls: Ensure that database service accounts operate with the principle of least privilege, restricting the ability of the plugin to execute administrative-level SQL commands.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is inherently exploitable by any actor who has already obtained administrator-level access to the WordPress dashboard.

Analyst Recommendation

Organizations using the Sender marketing plugin should prioritize this update as part of their standard patch management cycle. Given that administrative access is required for exploitation, administrators should also audit user account activity to ensure no unauthorized accounts have been created or escalated.

---METADATA---
VENDOR: CoCart
PRODUCT: CoCart – Headless ecommerce
AFFECTED_VERSIONS: n/a through 4.8.4
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A broken access control vulnerability in the CoCart plugin for WordPress allows unauthenticated attackers to perform unauthorized actions due to missing authorization checks.

Executive Summary:
An unauthenticated broken access control vulnerability in the CoCart plugin exposes the headless e-commerce store to unauthorized data manipulation and administrative actions.

Vulnerability Details

CVE-ID: CVE-2026-59536

Affected Software: CoCart – Headless ecommerce

Affected Versions: n/a through 4.8.4

Vulnerability: The flaw is classified under CWE-862, which refers to missing authorization. Attackers can leverage this to invoke restricted plugin functions without needing valid credentials, effectively bypassing the security model of the e-commerce integration.

Business Impact

A CVSS score of 7.5 reflects the high potential for unauthorized access to e-commerce operations. Exploitation could lead to the compromise of cart data, customer information, or the manipulation of store configurations, causing severe reputational and operational harm.

Remediation Plan

Immediate Action: Update the CoCart – Headless ecommerce plugin to version 4.9.0 or later to ensure all security checks are properly enforced.

Proactive Monitoring: Review application logs for unexpected API calls or unauthorized requests directed at the CoCart REST API endpoints.

Compensating Controls: Deploy a Web Application Firewall to monitor and restrict access to the plugin API, ensuring that only expected traffic patterns are permitted.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly concerning because it targets the core API functionality of the headless integration.

Analyst Recommendation

The severity of this access control failure mandates an immediate update to version 4.9.0. Organizations relying on CoCart for headless operations should verify their security posture and apply the patch without delay.

---METADATA---
VENDOR: Thrive Themes
PRODUCT: Thrive Product Manager
AFFECTED_VERSIONS: n/a through 10.9.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A broken access control vulnerability in the Thrive Product Manager WordPress plugin allows unauthenticated users to perform unauthorized actions due to missing capability checks.

Executive Summary:
The Thrive Product Manager plugin for WordPress is vulnerable to broken access control, which may permit unauthenticated attackers to perform unauthorized operations.

Vulnerability Details

CVE-ID: CVE-2026-59535

Affected Software: Thrive Themes Thrive Product Manager

Affected Versions: n/a through 10.9.2

Vulnerability: The plugin lacks proper authorization checks (CWE-862), allowing unauthenticated users to interact with sensitive functions. The CVSS vector confirms that no authentication is required (PR:N) and the attack complexity is low (AC:L).

Business Impact

An attacker can exploit this vulnerability to execute unintended actions within the Thrive Product Manager interface, potentially leading to unauthorized configuration changes or data exposure. The CVSS score of 7.3 highlights the high risk posed to the operational integrity of the WordPress site.

Remediation Plan

Immediate Action: Update the Thrive Product Manager plugin to version 10.9.2.1 or later to implement missing capability checks.

Proactive Monitoring: Monitor site activity logs for unauthorized plugin configuration changes or irregular access to the Thrive Product Manager dashboard.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter incoming requests and block attempts to access plugin-specific administrative endpoints without proper authorization.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of authorization checks makes the plugin highly susceptible to automated exploitation attempts.

Analyst Recommendation

This vulnerability presents a high risk due to the ease of exploitation. Security teams should immediately apply the available patch to ensure that access control logic is correctly enforced for all plugin functions.

---METADATA---
VENDOR: Aurovrata
PRODUCT: Post My CF7 Form
AFFECTED_VERSIONS: n/a through 6.2.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A broken access control vulnerability in the Post My CF7 Form plugin for WordPress allows unauthenticated attackers to perform unauthorized actions due to missing authorization checks.

Executive Summary:
A critical broken access control vulnerability in the Post My CF7 Form plugin allows unauthenticated attackers to bypass authorization, creating a high risk of unauthorized data handling.

Vulnerability Details

CVE-ID: CVE-2026-59534

Affected Software: Aurovrata Post My CF7 Form

Affected Versions: n/a through 6.2.0

Vulnerability: The vulnerability is identified as CWE-862, indicating a failure to perform adequate authorization checks on sensitive functions. This allows unauthenticated users to access or manipulate form data processing.

Business Impact

The ability for unauthenticated users to bypass access controls can result in unauthorized data exposure or the illegitimate submission of forms. With a CVSS score of 7.5, the impact is significant, potentially compromising the integrity of user-submitted data and internal workflows.

Remediation Plan

Immediate Action: Update the Post My CF7 Form plugin to version 7.0.0 or later to implement the necessary authorization controls.

Proactive Monitoring: Monitor server access logs for unauthorized attempts to access plugin-specific endpoints or form processing functions.

Compensating Controls: Utilize a Web Application Firewall to filter traffic and restrict access to administrative or sensitive plugin endpoints, reducing the attack surface.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of authorization checks makes this a highly accessible target for automated malicious traffic.

Analyst Recommendation

Immediate remediation is required to secure the plugin against unauthorized access. Administrators must ensure that the update to version 7.0.0 is applied promptly to mitigate the risk of data compromise.

---METADATA---
VENDOR: Christoph Vielgrader
PRODUCT: Relevanssi Light
AFFECTED_VERSIONS: n/a through 1.2.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An unauthenticated SQL injection vulnerability in the Relevanssi Light WordPress plugin allows remote attackers to compromise the database.

Executive Summary:
A critical SQL injection vulnerability in the Christoph Vielgrader Relevanssi Light plugin allows unauthenticated attackers to execute arbitrary database queries.

Vulnerability Details

CVE-ID: CVE-2026-59533

Affected Software: Christoph Vielgrader Relevanssi Light

Affected Versions: n/a through 1.2.2

Vulnerability: The plugin fails to properly sanitize user-supplied input before incorporating it into SQL commands. This allows an unauthenticated attacker to inject malicious SQL syntax, leading to unauthorized database interaction.

Business Impact

The CVSS score of 9.3 highlights the severity of this issue, as it allows for unauthorized data access without requiring any user account or elevated permissions. A successful exploit could lead to the exposure of sensitive site information, user credentials, or administrative data, potentially resulting in full system compromise.

Remediation Plan

Immediate Action: Update the Relevanssi Light plugin to version 1.2.3 or later to secure the application against this vulnerability.

Proactive Monitoring: Monitor site traffic and application logs for suspicious activity targeting search parameters or plugin-specific endpoints.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter out malicious SQL injection payloads from incoming HTTP requests.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly accessible to attackers because it does not require authentication.

Analyst Recommendation

Due to the critical nature of this vulnerability, administrators should perform an immediate update to the latest available version of the Relevanssi Light plugin. Applying the patch is the only definitive way to mitigate the risk of unauthorized database manipulation.

---METADATA---
VENDOR: MagePeople
PRODUCT: Booking and Rental Manager
AFFECTED_VERSIONS: n/a through 2.7.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A price manipulation vulnerability exists in the Booking and Rental Manager plugin for WordPress, allowing unauthenticated attackers to modify booking costs via improper input validation.

Executive Summary:
An unauthenticated price manipulation vulnerability in the Booking and Rental Manager plugin poses a high risk to business revenue and integrity.

Vulnerability Details

CVE-ID: CVE-2026-59532

Affected Software: MagePeople Booking and Rental Manager

Affected Versions: n/a through 2.7.2

Vulnerability: The vulnerability is categorized as CWE-1284, which involves improper validation of specified quantities in input. This allows unauthenticated attackers to manipulate price calculations during the booking process.

Business Impact

Successful exploitation of this flaw allows unauthorized actors to alter transaction values, leading to direct financial loss and potential degradation of business operations. Given the CVSS score of 7.5, this represents a high-severity risk that could be exploited at scale due to the lack of required authentication.

Remediation Plan

Immediate Action: Update the WordPress Booking and Rental Manager plugin to version 2.7.3 or later to resolve the input validation flaw.

Proactive Monitoring: Review WooCommerce order logs and transaction histories for anomalous price points or booking quantities that deviate from standard pricing structures.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to block suspicious requests targeting the plugin booking parameters until the patch is applied.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its ease of exploitation, as it does not require user interaction or authentication.

Analyst Recommendation

The vulnerability presents a clear threat to the financial integrity of e-commerce platforms using this plugin. Administrators should prioritize updating to version 2.7.3 immediately to prevent potential revenue manipulation and ensure transaction accuracy.

---METADATA---
VENDOR: Anh Tran
PRODUCT: Falcon – WordPress Optimizations & Tweaks
AFFECTED_VERSIONS: n/a through 2.10.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An unauthenticated vulnerability in the Falcon WordPress plugin allows for potential denial of service due to improper input validation.

Executive Summary:
An unauthenticated vulnerability in the Falcon WordPress plugin may allow remote attackers to cause a denial of service.

Vulnerability Details

CVE-ID: CVE-2026-59531

Affected Software: Anh Tran Falcon – WordPress Optimizations & Tweaks

Affected Versions: n/a through 2.10.0

Vulnerability: This is an unauthenticated vulnerability caused by improper validation of specified quantities in input. An attacker can trigger this condition without authentication, potentially leading to service disruption.

Business Impact

The vulnerability allows an unauthenticated remote attacker to impact system availability, which could result in significant downtime for the affected WordPress site. With a CVSS score of 7.5, this high-severity issue poses a direct threat to business continuity and site performance.

Remediation Plan

Immediate Action: Update the Falcon – WordPress Optimizations & Tweaks plugin to version 2.10.1 or later immediately.

Proactive Monitoring: Review web server and application logs for unusual traffic patterns or spikes in resource consumption that may indicate exploitation attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to sanitize incoming requests and filter malicious input patterns targeting the plugin.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly accessible because it does not require authentication.

Analyst Recommendation

Given that this vulnerability is exploitable by unauthenticated remote attackers and carries a high CVSS score, immediate patching is required. Administrators should verify their plugin versions and apply the update to 2.10.1 to secure the environment against potential denial of service attacks.

---METADATA---
VENDOR: Payment Plugins
PRODUCT: Stripe For WooCommerce
AFFECTED_VERSIONS: n/a through 4.0.7
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Stripe For WooCommerce plugin is vulnerable to broken access control, allowing unauthenticated attackers to perform unauthorized actions.

Executive Summary:
A critical broken access control vulnerability in the Stripe For WooCommerce plugin permits unauthenticated attackers to potentially modify store settings or perform unauthorized operations.

Vulnerability Details

CVE-ID: CVE-2026-59530

Affected Software: Payment Plugins Stripe For WooCommerce

Affected Versions: n/a through 4.0.7

Vulnerability: The plugin contains a missing authorization vulnerability (CWE-862) that allows unauthenticated remote attackers to perform actions that should be restricted to authorized users. This flaw bypasses necessary capability checks, leading to potential integrity compromises within the payment configuration.

Business Impact

This vulnerability allows an attacker to manipulate payment settings or integrity, which poses a direct risk to financial transactions and store operations. With a CVSS score of 7.5, the risk to the integrity of the payment processing environment is high, potentially leading to financial discrepancies or service disruption.

Remediation Plan

Immediate Action: Update the WordPress Stripe For WooCommerce plugin to version 4.0.8 or later to remediate the broken access control flaw.

Proactive Monitoring: Review application logs for unauthorized changes to payment settings or unexpected administrative activity during off-hours.

Compensating Controls: Apply WAF rules to restrict access to sensitive plugin endpoints, ensuring that only authenticated administrative traffic is permitted to interact with payment configuration functions.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of authorization checks makes this system highly susceptible to manipulation if left unpatched.

Analyst Recommendation

The severity and potential for integrity loss within the payment workflow demand immediate action. It is critical to apply the provided patch as soon as possible to ensure that payment settings remain secure and protected from unauthorized modification.

---METADATA---
VENDOR: motov.net
PRODUCT: Ebook Store
AFFECTED_VERSIONS: n/a through 6.19
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Ebook Store WordPress plugin is susceptible to unauthenticated sensitive data exposure due to missing authorization checks in its handling of requests.

Executive Summary:
A high-severity sensitive data exposure vulnerability in the Ebook Store plugin allows unauthenticated attackers to extract potentially sensitive information from the application.

Vulnerability Details

CVE-ID: CVE-2026-59529

Affected Software: motov.net Ebook Store

Affected Versions: n/a through 6.19

Vulnerability: The plugin suffers from missing authorization (CWE-862), which allows unauthenticated remote attackers to access sensitive data without requiring prior login or valid user privileges.

Business Impact

Successful exploitation allows unauthorized third parties to access sensitive data, which may include customer details, book sales information, or store configuration data. A CVSS score of 7.5 underscores the potential for significant loss of confidentiality, making this a priority for any organization utilizing the Ebook Store plugin.

Remediation Plan

Immediate Action: Upgrade the WordPress Ebook Store plugin to version 6.20 or later to ensure proper authorization controls are enforced.

Proactive Monitoring: Monitor server logs for high volumes of unauthorized request attempts and check for unusual data access patterns emanating from public IP addresses.

Compensating Controls: Utilize a Web Application Firewall (WAF) to block requests attempting to bypass authentication or access restricted endpoints within the Ebook Store plugin directory.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is inherently exploitable because it does not require an attacker to have a valid user account.

Analyst Recommendation

Given the ease of exploitation, security administrators must treat this as a high-priority remediation task. Updating to the latest version is the only effective way to prevent unauthorized data access and maintain the confidentiality of the Ebook Store environment.

---METADATA---
VENDOR: ShipTime
PRODUCT: Discounted Shipping Rates
AFFECTED_VERSIONS: n/a through 1.1.1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The ShipTime: Discounted Shipping Rates WordPress plugin is vulnerable to sensitive data exposure due to a lack of proper authorization checks.

Executive Summary:
A critical sensitive data exposure vulnerability in the ShipTime: Discounted Shipping Rates plugin allows unauthenticated attackers to access restricted information.

Vulnerability Details

CVE-ID: CVE-2026-59528

Affected Software: ShipTime Discounted Shipping Rates

Affected Versions: n/a through 1.1.1

Vulnerability: This vulnerability is a sensitive data exposure flaw (CWE-497) caused by the failure to restrict access to internal system information. It allows unauthenticated users to perform unauthorized queries that retrieve sensitive data, as indicated by the network attack vector and no required privileges in the CVSS vector.

Business Impact

The exposure of sensitive system information can lead to unauthorized access to proprietary shipping data or configuration details, potentially facilitating further attacks. With a CVSS score of 7.5, this high-severity vulnerability poses a significant risk to the confidentiality of customer and business information managed through the plugin.

Remediation Plan

Immediate Action: Update the WordPress ShipTime: Discounted Shipping Rates plugin to version 1.1.5 or later to resolve the underlying access control flaw.

Proactive Monitoring: Review web server access logs for unusual patterns of requests directed at the plugin endpoints and monitor for unexpected data export activities.

Compensating Controls: Implement a Web Application Firewall (WAF) to filter out suspicious requests targeting the plugin's sensitive functions until the update is successfully applied.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is highly accessible due to the unauthenticated nature of the attack vector, making prompt patching essential.

Analyst Recommendation

The high CVSS score and the nature of the data exposure necessitate an immediate update to the patched version. Organizations should prioritize this update to prevent unauthorized access to sensitive business information and maintain the integrity of their shipping management platform.

---METADATA---
VENDOR: RomanCode
PRODUCT: MapSVG
AFFECTED_VERSIONS: n/a through 8.14.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A critical SQL injection vulnerability in the MapSVG plugin for WordPress allows unauthenticated attackers to execute arbitrary SQL commands.

Executive Summary:
An unauthenticated SQL injection vulnerability in the RomanCode MapSVG plugin poses a critical risk of unauthorized database access and potential data exfiltration.

Vulnerability Details

CVE-ID: CVE-2026-59527

Affected Software: RomanCode MapSVG

Affected Versions: n/a through 8.14.0

Vulnerability: This vulnerability is a classic SQL injection flaw occurring in the MapSVG plugin. Because the vulnerability does not require authentication, any remote attacker can submit malicious inputs to the application to manipulate backend database queries.

Business Impact

Successful exploitation of this vulnerability allows an attacker to bypass security controls and gain unauthorized access to sensitive data stored within the WordPress database. Given the CVSS score of 9.3, this flaw is categorized as critical: it presents a high potential for data breaches and loss of confidentiality, which could result in severe reputational damage and regulatory non-compliance.

Remediation Plan

Immediate Action: Update the MapSVG plugin to version 8.14.1 or later immediately to apply the vendor-provided patch.

Proactive Monitoring: Review database query logs for unusual patterns, such as unexpected syntax errors or suspicious SQL keywords originating from public-facing web requests.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns until the plugin can be patched.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of July 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its unauthenticated nature, which allows for automated exploitation.

Analyst Recommendation

The critical severity of this vulnerability necessitates immediate remediation. Organizations using the MapSVG plugin must prioritize updating to version 8.14.1 or higher to eliminate this attack vector. Failure to patch leaves the underlying database exposed to unauthorized access by any remote attacker.

---METADATA---
VENDOR: RomanCode
PRODUCT: MapSVG
AFFECTED_VERSIONS: n/a through 8.14.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
MapSVG contains an unauthenticated SQL injection vulnerability in versions 8.14.0 and prior, allowing remote attackers to execute arbitrary database queries.

Executive Summary:
The MapSVG plugin for WordPress is vulnerable to an unauthenticated SQL injection flaw, which poses a critical risk of unauthorized database access.

Vulnerability Details

CVE-ID: CVE-2026-59526

Affected Software: RomanCode MapSVG

Affected Versions: n/a through 8.14.0

Vulnerability: This vulnerability is an improper neutralization of special elements used in an SQL command (CWE-89). It allows unauthenticated remote attackers to inject malicious SQL queries into the application database.

Business Impact

The ability for an unauthenticated actor to execute arbitrary SQL commands presents a severe risk to data confidentiality and integrity. With a CVSS score of 9.3, this vulnerability could be leveraged to extract sensitive information from the underlying WordPress database, potentially leading to a complete compromise of the site or exposure of user data.

Remediation Plan

Immediate Action: Update the MapSVG plugin to version 8.14.1 or the latest available version immediately.

Proactive Monitoring: Review database error logs for unusual query patterns and monitor access logs for suspicious requests targeting the plugin.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 23, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of authentication requirements makes this an attractive target for automated scanning tools.

Analyst Recommendation

Given the critical nature of this SQL injection vulnerability and the high CVSS score, immediate patching is required. Administrators should prioritize upgrading to version 8.14.1 to eliminate the risk of unauthorized database access and potential data exfiltration.

---METADATA---
VENDOR: Roland Barker
PRODUCT: Participants Database
AFFECTED_VERSIONS: n/a through 2.7.8.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Participants Database WordPress plugin before version 2.7.8.4 is susceptible to an unauthenticated SQL injection vulnerability.

Executive Summary:
An unauthenticated SQL injection vulnerability in the Participants Database plugin for WordPress allows attackers to extract sensitive data from the database.

Vulnerability Details

CVE-ID: CVE-2026-59525

Affected Software: Roland Barker Participants Database

Affected Versions: n/a through 2.7.8.3

Vulnerability: The plugin fails to properly sanitize user-supplied input before using it in database queries, allowing an unauthenticated attacker to inject malicious SQL commands. This flaw occurs within the plugin's core functionality, enabling unauthorized database interaction.

Business Impact

Successful exploitation allows an attacker to bypass authentication and access, modify, or delete sensitive data stored in the WordPress database. With a CVSS score of 9.3, this represents a major risk to data integrity and privacy, which could lead to significant regulatory and reputational consequences for the organization.

Remediation Plan

Immediate Action: Update the Participants Database plugin to version 2.7.8.4 or higher immediately to patch the injection vulnerability.

Proactive Monitoring: Monitor database query logs for anomalous syntax or unexpected access patterns that deviate from standard plugin behavior.

Compensating Controls: Deploy a Web Application Firewall with rules configured to detect and block common SQL injection patterns until the plugin can be updated.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 23, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. SQL injection remains a classic and highly effective attack vector for compromising database-backed applications.

Analyst Recommendation

Given the ease of exploitation and the potential for total data exposure, users must apply the available patch immediately. If an update cannot be performed, consider disabling the plugin entirely until the security risk is mitigated.

---METADATA---
VENDOR: wpWax
PRODUCT: Directorist
AFFECTED_VERSIONS: 0 through 8.8.2
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Directorist plugin for WordPress is vulnerable to PHP Object Injection via deserialization of untrusted data, allowing unauthenticated attackers to execute arbitrary code on the server.

Executive Summary:
A critical deserialization flaw in the wpWax Directorist plugin allows unauthenticated attackers to execute arbitrary code, creating an immediate risk of full system takeover.

Vulnerability Details

CVE-ID: CVE-2026-59518

Affected Software: wpWax Directorist

Affected Versions: 0 through 8.8.2

Vulnerability: This is a Deserialization of Untrusted Data (CWE-502) vulnerability. The plugin lacks proper verification of input, allowing unauthenticated attackers to inject malicious objects that can lead to remote code execution.

Business Impact

A successful exploit grants the attacker the ability to execute arbitrary PHP code, potentially leading to total site takeover, data breach, and the deployment of persistent backdoors. The CVSS score of 9.8 highlights the severity, as the lack of required authentication makes it easily exploitable by remote actors, threatening the entire underlying infrastructure.

Remediation Plan

Immediate Action: Update the Directorist plugin to a version beyond 8.8.2 as soon as the vendor provides a patch.

Proactive Monitoring: Review web server logs for irregular payload structures or unexpected code execution attempts associated with the Directorist plugin endpoints.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter out malicious serialized objects and prevent unauthenticated access to sensitive plugin functions.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Given the nature of object injection, it is highly likely that exploitation attempts will be automated once the vulnerability details become widely known.

Analyst Recommendation

The severity of this issue mandates an immediate update. If an update is not yet available, consider temporarily deactivating the Directorist plugin until a patched version is released to mitigate the risk of remote code execution.

---METADATA---
VENDOR: Sergey
PRODUCT: AIWU
AFFECTED_VERSIONS: 0 through 1.5.4
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Sergey AIWU WordPress plugin contains a Blind SQL Injection vulnerability, permitting unauthenticated attackers to execute malicious database queries.

Executive Summary:
A critical SQL injection vulnerability in the Sergey AIWU WordPress plugin enables unauthenticated attackers to compromise database confidentiality.

Vulnerability Details

CVE-ID: CVE-2026-59515

Affected Software: Sergey AIWU

Affected Versions: 0 through 1.5.4

Vulnerability: This vulnerability is a Blind SQL Injection (CWE-89) that occurs because the plugin does not properly sanitize user-supplied input before executing SQL commands. The vulnerability is network-exploitable without requiring authentication (AV:N/PR:N).

Business Impact

Successful exploitation of this vulnerability could allow an attacker to read data from the database, potentially exposing user credentials, configuration secrets, or other sensitive application data. The CVSS score of 9.3 underscores the extreme risk to the application's backend security and the potential for large-scale data theft.

Remediation Plan

Immediate Action: Update the AIWU plugin to the latest version immediately. If an update is unavailable, deactivate the plugin until the vendor provides a remediation.

Proactive Monitoring: Review web server and database error logs for signs of SQL injection attempts, including common SQL syntax characters (e.g., ', --, UNION) in unexpected input fields.

Compensating Controls: Implement a WAF to filter malicious traffic and block requests containing common SQL injection signatures directed at the AIWU plugin.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of authentication requirements makes this a high-priority target for automated scanning tools.

Analyst Recommendation

The severity of this issue necessitates an immediate response. Administrators must ensure all instances of the AIWU plugin are updated to the latest version to eliminate the SQL injection vector and protect against potential unauthorized data access.

---METADATA---
VENDOR: BuddyBoss
PRODUCT: BuddyBoss Platform
AFFECTED_VERSIONS: up to and including 3.0.5
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The BuddyBoss Platform plugin for WordPress contains an unauthenticated SQL injection vulnerability that allows attackers to execute arbitrary database queries.

Executive Summary:
A critical SQL injection vulnerability in the BuddyBoss Platform plugin allows unauthenticated attackers to execute malicious database queries, potentially leading to full site database compromise.

Vulnerability Details

CVE-ID: CVE-2026-59514

Affected Software: BuddyBoss BuddyBoss Platform

Affected Versions: up to and including 3.0.5

Vulnerability: This is an SQL injection vulnerability (CWE-89) where the plugin fails to properly neutralize user-supplied input, allowing an unauthenticated attacker to interact directly with the underlying database.

Business Impact

The CVSS score of 9.3 highlights the severe risk posed by this vulnerability. Successful exploitation allows for the exfiltration of sensitive site data, including user credentials or private community information, and may provide a vector for further unauthorized system access.

Remediation Plan

Immediate Action: Update the BuddyBoss Platform plugin to version 3.1.0 or later immediately.

Proactive Monitoring: Monitor database query logs for unusual patterns, such as unexpected UNION SELECT statements or syntax errors originating from the plugin.

Compensating Controls: Implement a Web Application Firewall (WAF) with SQL injection protection enabled to filter and drop malicious queries targeting the plugin.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 23, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. SQL injection flaws are frequently targeted by automated scanners, so the risk of discovery is high.

Analyst Recommendation

This vulnerability presents a major risk to the confidentiality of your platform data. You must apply the update to version 3.1.0 as soon as possible to neutralize the injection vector and secure your database.

---METADATA---
VENDOR: AIL Project
PRODUCT: AIL Framework
AFFECTED_VERSIONS: 0 through v6.9.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The AIL Framework is susceptible to a path traversal vulnerability within its PDF object handling component, potentially allowing unauthorized file access.

Executive Summary:
A path traversal vulnerability in the AIL Framework allows authenticated attackers to potentially access sensitive files, posing a significant risk to data confidentiality.

Vulnerability Details

CVE-ID: CVE-2026-59510

Affected Software: AIL Project AIL Framework

Affected Versions: 0 through v6.9.0

Vulnerability: The application fails to properly sanitize input during PDF object processing, which enables path traversal. This vulnerability requires a low-privileged authenticated user to trigger the flaw.

Business Impact

The ability to perform path traversal allows an attacker to read arbitrary files on the underlying server, which may lead to the exposure of sensitive configuration files, credentials, or proprietary data. With a CVSS score of 7.1, this is classified as a High severity issue. Failure to mitigate this risk could result in a full compromise of the application's data confidentiality and potential escalation of privileges within the host environment.

Remediation Plan

Immediate Action: Update the AIL Framework to a version beyond v6.9.0 once the vendor releases a patched version. In the interim, restrict access to the PDF processing functionality to trusted users only.

Proactive Monitoring: Review application access logs for unusual file path patterns or directory traversal sequences (e.g., ../) associated with PDF handling requests.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to detect and block path traversal patterns in incoming request parameters.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This path traversal vulnerability represents a significant security risk to the AIL Framework. Administrators should prioritize monitoring for anomalous activity and prepare to deploy the vendor-supplied patch as soon as it becomes available to ensure the integrity and confidentiality of the host system.

---METADATA---
VENDOR: cve-search
PRODUCT: cve-search
AFFECTED_VERSIONS: v4.0 through v6.0.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The cve-search application is vulnerable to improper input validation in its API, allowing unauthenticated remote attackers to read arbitrary MongoDB collections, including administrative credentials.

Executive Summary:
An unauthenticated input validation vulnerability in cve-search allows remote attackers to exfiltrate administrative credentials from the underlying MongoDB database.

Vulnerability Details

CVE-ID: CVE-2026-59509

Affected Software: cve-search

Affected Versions: v4.0 through v6.0.0

Vulnerability: This vulnerability is an Improper Input Validation (CWE-20) issue located in the POST /fetch_cve_data endpoint. By manipulating request parameters, an unauthenticated attacker can query arbitrary MongoDB collections, including those containing administrative user hashes.

Business Impact

Successful exploitation allows an attacker to extract user data and password hashes, which can then be cracked offline to gain full administrative control over the cve-search instance. With a CVSS score of 9.2, this represents a critical risk, especially if the instance is used to manage sensitive vulnerability management data or is integrated into other security workflows.

Remediation Plan

Immediate Action: Update the cve-search software to the latest version as specified in the vendor's security advisory.

Proactive Monitoring: Review access logs for the /fetch_cve_data endpoint, specifically looking for unusual regex patterns or attempts to access collections other than those intended for standard use.

Compensating Controls: Restrict network access to the cve-search instance using IP allowlisting or VPN requirements to prevent unauthorized access to the API endpoints.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jul 5, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the ease of access to administrative hashes, this vulnerability must be patched immediately. Ensure that the update is applied and verify that the instance is not exposed to the public internet without proper authentication or network-level restrictions.

---METADATA---
VENDOR: Priority
PRODUCT: Portal Generator addon to Priority ERP
AFFECTED_VERSIONS: All versions without Priwall v3
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Portal Generator addon for Priority ERP contains an improper access control vulnerability that allows unauthenticated attackers to bypass security restrictions.

Executive Summary:
An unauthenticated access control vulnerability in the Priority Portal Generator addon exposes the Priority ERP environment to potential unauthorized access.

Vulnerability Details

CVE-ID: CVE-2026-59505

Affected Software: Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)

Affected Versions: All versions without Priwall v3

Vulnerability: This vulnerability, categorized as CWE-284, represents a failure to properly restrict access to the Portal Generator component. An unauthenticated attacker can exploit this flaw to interact with the system in ways that should be prohibited by default security policies.

Business Impact

The risk associated with this vulnerability is severe, as it allows attackers to potentially interact with the underlying Priority ERP system. With a CVSS score of 8.6, the compromise of an ERP system can lead to the exposure of sensitive business data, financial records, and operational disruptions, posing a critical threat to organizational integrity.

Remediation Plan

Immediate Action: Either restrict external access to the Priority infrastructure or migrate to the Modern Priority Portals provided by Priority Software.

Proactive Monitoring: Monitor network traffic for unusual connections directed at the Portal Generator interface and audit user activity for suspicious data access patterns.

Compensating Controls: Implement strict network-level controls, such as VPN requirements or IP allowlisting, to ensure that the Portal Generator is not directly accessible from the public internet.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 15, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While exploitation is not currently confirmed, the nature of the flaw makes it an attractive target for automated discovery.

Analyst Recommendation

Due to the critical nature of ERP systems, it is vital to secure the Portal Generator immediately. Administrators should prioritize moving away from vulnerable versions by implementing the vendor-recommended migration or by strictly isolating the affected infrastructure from the internet to mitigate the risk of unauthorized access.

---METADATA---
VENDOR: Priority
PRODUCT: Portal Generator addon to Priority ERP
AFFECTED_VERSIONS: All versions without Priwall v3
CONFIDENCE: medium
MISSING: patch
---END_METADATA---

Description Summary:
The Portal Generator addon to Priority ERP is vulnerable to improper authentication, which may allow unauthorized access to the application infrastructure.

Executive Summary:
A critical authentication bypass vulnerability in the Priority Portal Generator addon exposes ERP infrastructure to unauthorized access and potential data compromise.

Vulnerability Details

CVE-ID: CVE-2026-59500

Affected Software: Priority Portal Generator addon to Priority ERP

Affected Versions: All versions without Priwall v3

Vulnerability: The vulnerability is categorized as CWE-287, Improper Authentication. It allows an unauthenticated, remote attacker to bypass security controls and potentially gain unauthorized access to the Priority ERP environment.

Business Impact

With a CVSS score of 10.0, this vulnerability presents an extreme risk to the confidentiality and integrity of business-critical ERP data. Unauthorized access could lead to the exposure of sensitive financial or operational information, and the potential for attackers to perform unauthorized transactions within the system.

Remediation Plan

Immediate Action: Restrict internet access to the Priority ERP infrastructure or transition to the Modern Priority Portals provided by Priority Software.

Proactive Monitoring: Review authentication logs for irregular login patterns and unauthorized access attempts targeting the portal interface.

Compensating Controls: Implement strict network-level access controls, such as VPN requirements or IP allowlisting, to ensure that only authorized users can reach the portal infrastructure.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While exploitation is not currently confirmed, the nature of the flaw makes it an attractive target for automated scanning and unauthorized access attempts.

Analyst Recommendation

The severity of this vulnerability necessitates immediate action to prevent unauthorized access. Organizations should prioritize isolating the affected portal from the public internet until they can migrate to the recommended secure infrastructure.

---METADATA---
VENDOR: Soft Solutions
PRODUCT: Portal Generator addon to Priority ERP
AFFECTED_VERSIONS: All versions without Priwall v3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Portal Generator addon for Priority ERP is susceptible to an information disclosure vulnerability that allows unauthenticated remote attackers to access sensitive data.

Executive Summary:
This high-severity vulnerability in the Portal Generator addon for Priority ERP permits unauthenticated attackers to exfiltrate sensitive information from the underlying infrastructure.

Vulnerability Details

CVE-ID: CVE-2026-59499

Affected Software: Soft Solutions Portal Generator addon to Priority ERP

Affected Versions: All versions without Priwall v3

Vulnerability: This vulnerability is an exposure of sensitive information (CWE-200) triggered by a lack of access control. The attack vector is network-based and requires no authentication, allowing an attacker to interact with the system remotely to perform unauthorized data retrieval.

Business Impact

Successful exploitation of this flaw could lead to the exposure of proprietary business data, customer records, or internal configuration details. Given the CVSS score of 8.6, the risk is high: organizations may face significant reputational damage, regulatory non-compliance, and loss of competitive advantage due to unauthorized data access.

Remediation Plan

Immediate Action: Organizations must migrate to Priwall v3, as all versions lacking this update are vulnerable. If migration is not immediately possible, restrict network access to the Priority infrastructure to prevent internet exposure.

Proactive Monitoring: Review web server and application access logs for unusual patterns of data requests, particularly those originating from untrusted or unexpected IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block unauthorized requests to sensitive application endpoints.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 15, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is considered highly dangerous because it is automatable and does not require user interaction or authentication.

Analyst Recommendation

The potential for unauthorized data exposure makes this a critical security concern. Administrators are urged to prioritize the upgrade to Priwall v3 or enforce strict network perimeter controls to isolate the affected ERP components from the public internet immediately.

---METADATA---
VENDOR: ISC
PRODUCT: BIND 9
AFFECTED_VERSIONS: 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.20.9-S1 through 9.20.22-S1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A race condition in ISC BIND 9 leads to a use-after-free vulnerability, potentially causing undefined behavior or service disruption.

Executive Summary:
A race condition vulnerability in ISC BIND 9 could lead to a use-after-free condition, posing a risk of service instability or potential remote exploitation.

Vulnerability Details

CVE-ID: CVE-2026-5947

Affected Software: ISC BIND 9

Affected Versions: 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.20.9-S1 through 9.20.22-S1

Vulnerability: This vulnerability is caused by a race condition (CWE-362) that triggers a use-after-free (CWE-416) condition. The flaw can be triggered remotely by sending specific queries, making it a serious concern for DNS infrastructure.

Business Impact

The CVSS score of 7.5 reflects a High severity. As DNS is a foundational service, successful exploitation could lead to denial-of-service (DoS) conditions, potentially causing widespread network outages and service unavailability for the organization.

Remediation Plan

Immediate Action: Upgrade to the patched releases: 9.20.23, 9.21.22, or 9.20.23-S1 immediately.

Proactive Monitoring: Monitor BIND server logs for crashes or unexpected restarts, which may indicate attempted exploitation of the race condition.

Compensating Controls: Ensure that BIND instances are protected by access control lists (ACLs) to limit query sources and minimize the attack surface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 22, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical nature of DNS infrastructure, this patch should be prioritized in all production environments. Verify your current BIND version immediately and schedule an emergency maintenance window to apply the relevant security update.

---METADATA---
VENDOR: ISC
PRODUCT: BIND 9
AFFECTED_VERSIONS: 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, 9.20.9-S1 through 9.20.22-S1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Multiple flaws in the BIND 9 named component allow for improper input validation and out-of-bounds reads when handling non-Internet DNS message classes.

Executive Summary:
A critical vulnerability in the ISC BIND 9 DNS server software allows for potential service disruption or crashes due to improper handling of specific DNS message classes.

Vulnerability Details

CVE-ID: CVE-2026-5946

Affected Software: ISC BIND 9

Affected Versions: 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and associated Subscription Edition (S1) versions.

Vulnerability: This vulnerability involves improper input validation (CWE-20), out-of-bounds read (CWE-125), and reachable assertions (CWE-617) within named. It can be triggered by unauthenticated remote attackers sending specially crafted DNS queries containing non-standard classes like CHAOS, HESIOD, or meta-classes.

Business Impact

Successful exploitation of this flaw can lead to a denial-of-service (DoS) condition, crashing the DNS service and rendering name resolution unavailable for dependent infrastructure. Given the CVSS score of 7.5, this poses a significant risk to network availability and business continuity.

Remediation Plan

Immediate Action: Upgrade to the patched releases: 9.18.49, 9.20.23, 9.21.22, 9.18.49-S1, or 9.20.23-S1.

Proactive Monitoring: Monitor named service logs for frequent restarts or crash reports coinciding with unusual DNS query traffic patterns.

Compensating Controls: Implement firewall rules to drop non-standard DNS query traffic if your environment does not require support for CHAOS or HESIOD classes.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 22, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations running BIND 9 must prioritize patching to the versions listed above. Given the potential for automated exploitation, failure to address this flaw could lead to significant infrastructure outages.