#cyber-security — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #cyber-security, aggregated by home.social.
-
Gay & Lesbian Community Services Center Reported Data Breach Affecting Approximately 75,532 Individuals
The Gay & Lesbian Community Services Center of Orange County reported a data breach affecting 75,532 individuals after unauthorized access to its network between December 25 and December 26, 2025. The Inc Ransom group claimed responsibility, and the exposed data may include personal and medical information. The organization is offering complimentary identity protection services.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/gay-lesbian-community-services-center-of-orange-county-discloses-data-breach-affecting-approximately-75532-individuals-z-q-o-0-j/gD2P6Ple2L -
Gay & Lesbian Community Services Center Reported Data Breach Affecting Approximately 75,532 Individuals
The Gay & Lesbian Community Services Center of Orange County reported a data breach affecting 75,532 individuals after unauthorized access to its network between December 25 and December 26, 2025. The Inc Ransom group claimed responsibility, and the exposed data may include personal and medical information. The organization is offering complimentary identity protection services.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/gay-lesbian-community-services-center-of-orange-county-discloses-data-breach-affecting-approximately-75532-individuals-z-q-o-0-j/gD2P6Ple2L -
🚨 EUVD-2026-43443
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Themify Builder
🏢 Vendor: themifyme
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Builder themify-builder allows Reflected XSS.This issue affects Themify Builder: from n/a through <= 7.7.4.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43443
-
🚨 EUVD-2026-43443
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Themify Builder
🏢 Vendor: themifyme
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Builder themify-builder allows Reflected XSS.This issue affects Themify Builder: from n/a through <= 7.7.4.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43443
-
🚨 EUVD-2026-43445
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: reCAPTCHA (v2 & v3) for Asgaros Forum
🏢 Vendor: Hitesh Chandwani
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hitesh Chandwani reCAPTCHA (v2 & v3) for Asgaros Forum recaptcha-for-asgaros-forum allows DOM-Based XSS.This ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43445
-
🚨 EUVD-2026-43445
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: reCAPTCHA (v2 & v3) for Asgaros Forum
🏢 Vendor: Hitesh Chandwani
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hitesh Chandwani reCAPTCHA (v2 & v3) for Asgaros Forum recaptcha-for-asgaros-forum allows DOM-Based XSS.This ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43445
-
🚨 EUVD-2026-43446
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Chatbot
🏢 Vendor: QuantumCloud
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot chatbot allows Stored XSS.This issue affects ChatBot: from n/a through <= 8.3.7.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43446
-
🚨 EUVD-2026-43446
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Chatbot
🏢 Vendor: QuantumCloud
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot chatbot allows Stored XSS.This issue affects ChatBot: from n/a through <= 8.3.7.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43446
-
🚨 EUVD-2026-43447
📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: WPJAM Basic
🏢 Vendor: Denishua
📅 Updated: 2026-07-13📝 Deserialization of Untrusted Data vulnerability in denishua WPJAM Basic wpjam-basic allows Object Injection.This issue affects WPJAM Basic: from n/a through <= 7.0.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43447
-
🚨 EUVD-2026-43447
📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: WPJAM Basic
🏢 Vendor: Denishua
📅 Updated: 2026-07-13📝 Deserialization of Untrusted Data vulnerability in denishua WPJAM Basic wpjam-basic allows Object Injection.This issue affects WPJAM Basic: from n/a through <= 7.0.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43447
-
🚨 EUVD-2026-43448
📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: WPJAM Basic
🏢 Vendor: Denishua
📅 Updated: 2026-07-13📝 Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Basic wpjam-basic allows Server Side Request Forgery.This issue affects WPJAM Basic: from n/a through <= 7.0.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43448
-
🚨 EUVD-2026-43448
📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: WPJAM Basic
🏢 Vendor: Denishua
📅 Updated: 2026-07-13📝 Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Basic wpjam-basic allows Server Side Request Forgery.This issue affects WPJAM Basic: from n/a through <= 7.0.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43448
-
🚨 EUVD-2026-43450
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Jobmonster
🏢 Vendor: NooTheme
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through <= 4.8.5.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43450
-
🚨 EUVD-2026-43451
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More
🏢 Vendor: WPDeveloper
📅 Updated: 2026-07-13📝 Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More better...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43451
-
🚨 EUVD-2026-43450
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Jobmonster
🏢 Vendor: NooTheme
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through <= 4.8.5.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43450
-
🚨 EUVD-2026-43451
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More
🏢 Vendor: WPDeveloper
📅 Updated: 2026-07-13📝 Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More better...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43451
-
🚨 EUVD-2026-43442
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: WowAddons
🏢 Vendor: wpxpo
📅 Updated: 2026-07-13📝 Missing Authorization vulnerability in WPXPO WowAddons product-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowAddons: from n/a through <= 1.6.8.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43442
-
🚨 EUVD-2026-43444
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: ElementInvader Addons for Elementor
🏢 Vendor: Element Invader
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows DOM-Based XSS.This issue ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43444
-
🚨 EUVD-2026-43444
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: ElementInvader Addons for Elementor
🏢 Vendor: Element Invader
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows DOM-Based XSS.This issue ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43444
-
🚨 EUVD-2026-43442
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: WowAddons
🏢 Vendor: wpxpo
📅 Updated: 2026-07-13📝 Missing Authorization vulnerability in WPXPO WowAddons product-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowAddons: from n/a through <= 1.6.8.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43442
-
🚨 EUVD-2026-43449
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: MStore API
🏢 Vendor: FluxBuilder
📅 Updated: 2026-07-13📝 Missing Authorization vulnerability in FluxBuilder MStore API mstore-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MStore API: from n/a through <= 4.18.4.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43449
-
🚨 EUVD-2026-43449
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: MStore API
🏢 Vendor: FluxBuilder
📅 Updated: 2026-07-13📝 Missing Authorization vulnerability in FluxBuilder MStore API mstore-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MStore API: from n/a through <= 4.18.4.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43449
-
🚨 EUVD-2026-43452
📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Advanced Forms
🏢 Vendor: Phil Kurth
📅 Updated: 2026-07-13📝 Missing Authorization vulnerability in Phil Kurth Advanced Forms advanced-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Forms: from n/a through <= 1.9.3.7.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43452
-
🚨 EUVD-2026-43452
📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Advanced Forms
🏢 Vendor: Phil Kurth
📅 Updated: 2026-07-13📝 Missing Authorization vulnerability in Phil Kurth Advanced Forms advanced-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Forms: from n/a through <= 1.9.3.7.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43452
-
🚨 EUVD-2026-43453
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Extensions for Leaflet Map
🏢 Vendor: hupe13
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS.This issue affects Extensions for Leaflet Map: from n/a thro...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43453
-
🚨 EUVD-2026-43453
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Extensions for Leaflet Map
🏢 Vendor: hupe13
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS.This issue affects Extensions for Leaflet Map: from n/a thro...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43453
-
🚨 EUVD-2026-43454
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: FormyChat
🏢 Vendor: WPPOOL
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through <= 2.15.3.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43454
-
🚨 EUVD-2026-43454
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: FormyChat
🏢 Vendor: WPPOOL
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through <= 2.15.3.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43454
-
🚨 EUVD-2026-43455
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: PropertyHive
🏢 Vendor: Property Hive
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows Reflected XSS.This issue affects PropertyHive: from n/a through <= 2.2.3.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43455
-
🚨 EUVD-2026-43456
📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: aBlocks
🏢 Vendor: Kodezen LLC
📅 Updated: 2026-07-13📝 Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a through < 2.9.1.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43456
-
🚨 EUVD-2026-43455
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: PropertyHive
🏢 Vendor: Property Hive
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows Reflected XSS.This issue affects PropertyHive: from n/a through <= 2.2.3.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43455
-
🚨 EUVD-2026-43456
📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: aBlocks
🏢 Vendor: Kodezen LLC
📅 Updated: 2026-07-13📝 Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a through < 2.9.1.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43456
-
🚨 EUVD-2026-43457
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Simple File List
🏢 Vendor: Mitchell Bennis
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Reflected XSS.This issue affects Simple File List: from n/a through <= 6.3.8.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43457
-
🚨 EUVD-2026-43457
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Simple File List
🏢 Vendor: Mitchell Bennis
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Reflected XSS.This issue affects Simple File List: from n/a through <= 6.3.8.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43457
-
🚨 EUVD-2026-43458
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: JobSearch
🏢 Vendor: eyecix
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Stored XSS.This issue affects JobSearch: from n/a through <= 3.2.9.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43458
-
🚨 EUVD-2026-43458
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: JobSearch
🏢 Vendor: eyecix
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Stored XSS.This issue affects JobSearch: from n/a through <= 3.2.9.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43458
-
🚨 EUVD-2026-43459
📊 Score: 8.5/10 (CVSS v3.1)
📦 Product: Vitepos
🏢 Vendor: appsbd
📅 Updated: 2026-07-13📝 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through <= 3.4.2.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43459
-
🚨 EUVD-2026-43459
📊 Score: 8.5/10 (CVSS v3.1)
📦 Product: Vitepos
🏢 Vendor: appsbd
📅 Updated: 2026-07-13📝 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through <= 3.4.2.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43459
-
🚨 EUVD-2026-43460
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: picu
🏢 Vendor: picu
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in picu picu picu allows Stored XSS.This issue affects picu: from n/a through <= 3.5.1.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43460
-
🚨 EUVD-2026-43460
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: picu
🏢 Vendor: picu
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in picu picu picu allows Stored XSS.This issue affects picu: from n/a through <= 3.5.1.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43460
-
🚨 EUVD-2026-43461
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Hydra Booking
🏢 Vendor: Themefic
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through <= 1.1.44.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43461
-
🚨 EUVD-2026-43461
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Hydra Booking
🏢 Vendor: Themefic
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through <= 1.1.44.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43461
-
🚨 EUVD-2026-43462
📊 Score: 8.6/10 (CVSS v3.1)
📦 Product: Groundhogg
🏢 Vendor: Adrian Tobey
📅 Updated: 2026-07-13📝 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg groundhogg allows Path Traversal.This issue affects Groundhogg: from n/a through <= 4.4.1.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43462
-
🚨 EUVD-2026-43462
📊 Score: 8.6/10 (CVSS v3.1)
📦 Product: Groundhogg
🏢 Vendor: Adrian Tobey
📅 Updated: 2026-07-13📝 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg groundhogg allows Path Traversal.This issue affects Groundhogg: from n/a through <= 4.4.1.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43462
-
🚨 EUVD-2026-43463
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Extra Product Options Builder for WooCommerce
🏢 Vendor: edgarrojas
📅 Updated: 2026-07-13📝 Missing Authorization vulnerability in EDGARROJAS Extra Product Options Builder for WooCommerce additional-product-fields-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This is...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43463
-
🚨 EUVD-2026-43463
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Extra Product Options Builder for WooCommerce
🏢 Vendor: edgarrojas
📅 Updated: 2026-07-13📝 Missing Authorization vulnerability in EDGARROJAS Extra Product Options Builder for WooCommerce additional-product-fields-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This is...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43463
-
🚨 EUVD-2026-43464
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Loops & Logic
🏢 Vendor: Tangible
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tangible Loops & Logic tangible-loops-and-logic allows Stored XSS.This issue affects Loops & Logic: from n/a through <= 4.2.3.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43464
-
🚨 EUVD-2026-43464
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Loops & Logic
🏢 Vendor: Tangible
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tangible Loops & Logic tangible-loops-and-logic allows Stored XSS.This issue affects Loops & Logic: from n/a through <= 4.2.3.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43464
-
🚨 EUVD-2026-43465
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Tourfic
🏢 Vendor: Themefic
📅 Updated: 2026-07-13📝 Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through <= 2.22.5.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43465
-
🚨 EUVD-2026-43465
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Tourfic
🏢 Vendor: Themefic
📅 Updated: 2026-07-13📝 Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through <= 2.22.5.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43465
-
🚨 EUVD-2026-43466
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Newsletters
🏢 Vendor: Tribulant Software
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issue affects Newsletters: from n/a through <= 4.14.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43466
-
🚨 EUVD-2026-43466
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Newsletters
🏢 Vendor: Tribulant Software
📅 Updated: 2026-07-13📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issue affects Newsletters: from n/a through <= 4.14.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43466
-
🚨 EUVD-2026-43467
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: WooCommerce PDF Invoice Builder
🏢 Vendor: edgarrojas
📅 Updated: 2026-07-13📝 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce P...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43467
-
🚨 EUVD-2026-43467
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: WooCommerce PDF Invoice Builder
🏢 Vendor: edgarrojas
📅 Updated: 2026-07-13📝 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce P...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43467
-
🚨 EUVD-2026-43496
📊 Score: 9.3/10 (CVSS v3.1)
📦 Product: Flamingo
🏢 Vendor: VITEC
📅 Updated: 2026-07-13📝 Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/ping.php endpoint that allows remote attackers to execute arbitrary commands by exploiting a double-evaluation flaw in shell argument handling. The endpoint...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43496
-
🚨 EUVD-2026-43496
📊 Score: 9.3/10 (CVSS v3.1)
📦 Product: Flamingo
🏢 Vendor: VITEC
📅 Updated: 2026-07-13📝 Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/ping.php endpoint that allows remote attackers to execute arbitrary commands by exploiting a double-evaluation flaw in shell argument handling. The endpoint...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43496
-
🚨 EUVD-2026-43497
📊 Score: 9.3/10 (CVSS v3.1)
📦 Product: Flamingo
🏢 Vendor: VITEC
📅 Updated: 2026-07-13📝 Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands by supplying shell metacharacters in the start, end, key,...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43497
-
🚨 EUVD-2026-43497
📊 Score: 9.3/10 (CVSS v3.1)
📦 Product: Flamingo
🏢 Vendor: VITEC
📅 Updated: 2026-07-13📝 Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands by supplying shell metacharacters in the start, end, key,...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43497