|
4221
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in WPXPO WowOptin optin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowOptin: from n/a through <= 1.4.32.
|
CWE-862
Missing Authorization
|
CVE-2026-39700
|
2026-04-25 03:05 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4222
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from n/a through <= 5.2.4.
|
CWE-862
Missing Authorization
|
CVE-2026-39701
|
2026-04-25 03:05 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4223
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wealcoder Animation Addons for Elementor animation-addons-for-elementor allows DOM-Based XSS.This…
|
CWE-79
Cross-site Scripting
|
CVE-2026-39702
|
2026-04-25 03:05 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4224
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor allows Stored XSS.Thi…
|
CWE-79
Cross-site Scripting
|
CVE-2026-39703
|
2026-04-25 03:05 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4225
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in nfusionsolutions Precious Metals Automated Product Pricing – Pro precious-metals-automated-product-pricing-pro allows Exploiting Incorrectly Configured Ac…
|
CWE-862
Missing Authorization
|
CVE-2026-39704
|
2026-04-25 03:05 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4226
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in Mulika Team MIPL WC Multisite Sync mipl-wc-multisite-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MIPL WC Mul…
|
CWE-862
Missing Authorization
|
CVE-2026-39705
|
2026-04-25 03:05 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4227
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in Netro Systems Make My Trivia trivialy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Make My Trivia: from n/a throug…
|
CWE-862
Missing Authorization
|
CVE-2026-39706
|
2026-04-25 03:05 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4228
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in ZealousWeb Accept PayPal Payments using Contact Form 7 contact-form-7-paypal-extension allows Exploiting Incorrectly Configured Access Control Security Levels.T…
|
CWE-862
Missing Authorization
|
CVE-2026-39707
|
2026-04-25 03:05 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4229
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/queue: Call fini on exec queue creation fail
Every call to queue init should have a corresponding fini call.
Skipping this…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2026-23350
|
2026-04-25 03:05 |
2026-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4230
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:
drm/xe/queue: Llamar a fini al fallar la creación de la cola de ejecución
Cada llamada a init de cola debería tener una llamada …
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2026-23350
|
2026-04-25 03:05 |
2026-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|