Anwendungssicherheit
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-86123: High Schwachstelle
SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-81543: High Schwachstelle
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-77826: High Schwachstelle
The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was issued to before accepting...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-19887: High Schwachstelle
The Welcart e-Commerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.1...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-86189: Critical Schwachstelle
WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to write files to arbitrary locations by...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-10196: Critical Schwachstelle
The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object...
ANWENDUNGSSICHERHEIT
🔴 CVE-2024-11080: Critical Schwachstelle
The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-83627: Critical Schwachstelle
The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in...
ANWENDUNGSSICHERHEIT
Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified...
ANWENDUNGSSICHERHEIT
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code...