CVE Alert: CVE-2026-103766 - MacWarrior - clipbucket-v5 - https://www.redpacketsecurity.com/cve-alert-cve-2026-103766-macwarrior-clipbucket-v5/
RedPacket Security
CVE Alert: CVE-2026-103766 - MacWarrior - clipbucket-v5 - RedPacket Security
ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows authenticated users with ad_manager_access permission to inject SQL via
CVE Alert: CVE-2026-104123 - SourceCodester - Online Reviewer Management System - https://www.redpacketsecurity.com/cve-alert-cve-2026-104123-sourcecodester-online-reviewer-management-system/
RedPacket Security
CVE Alert: CVE-2026-104123 - SourceCodester - Online Reviewer Management System - RedPacket Security
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file
CVE Alert: CVE-2026-93367 - wp-buy - Visitor Traffic Real Time Statistics pro - https://www.redpacketsecurity.com/cve-alert-cve-2026-93367-wp-buy-visitor-traffic-real-time-statistics-pro/
RedPacket Security
CVE Alert: CVE-2026-93367 - wp-buy - Visitor Traffic Real Time Statistics pro - RedPacket Security
The Visitors Traffic Real Time Statistics Pro plugin for WordPress is vulnerable to unauthenticated stored Cross-Site Scripting in all versions up to, and
CVE Alert: CVE-2026-104120 - modelcontextprotocol - mcp-server-fetch - https://www.redpacketsecurity.com/cve-alert-cve-2026-104120-modelcontextprotocol-mcp-server-fetch/
RedPacket Security
CVE Alert: CVE-2026-104120 - modelcontextprotocol - mcp-server-fetch - RedPacket Security
A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function
CVE Alert: CVE-2026-15897 - WebRehab - Super Forms – Drag & Drop Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-15897-webrehab-super-forms-drag-drop-form-builder/
RedPacket Security
CVE Alert: CVE-2026-15897 - WebRehab - Super Forms – Drag & Drop Form Builder - RedPacket Security
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This
CVE Alert: CVE-2026-90438 - kstover - Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-90438-kstover-ninja-forms-contact-form-builder-with-calculators-quizzes-signatures-ai-form-builder/
RedPacket Security
CVE Alert: CVE-2026-90438 - kstover - Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder…
The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text (RTE)
[KRYBIT] - Ransomware Victim: www[.]kres[.]cz - https://www.redpacketsecurity.com/krybit-ransomware-victim-www-kres-cz/
RedPacket Security
[KRYBIT] - Ransomware Victim: www[.]kres[.]cz - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SETTRA] - Ransomware Victim: goldenpearfunding[.]com - https://www.redpacketsecurity.com/settra-ransomware-victim-goldenpearfunding-com/
RedPacket Security
[SETTRA] - Ransomware Victim: goldenpearfunding[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SETTRA] - Ransomware Victim: mcpolymers[.]com - https://www.redpacketsecurity.com/settra-ransomware-victim-mcpolymers-com/
RedPacket Security
[SETTRA] - Ransomware Victim: mcpolymers[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[KRYBIT] - Ransomware Victim: sai[.]org[.]in - https://www.redpacketsecurity.com/krybit-ransomware-victim-sai-org-in/
RedPacket Security
[KRYBIT] - Ransomware Victim: sai[.]org[.]in - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[KRYBIT] - Ransomware Victim: www[.]raajratna[.]com - https://www.redpacketsecurity.com/krybit-ransomware-victim-www-raajratna-com/
RedPacket Security
[KRYBIT] - Ransomware Victim: www[.]raajratna[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[KRYBIT] - Ransomware Victim: www[.]pierrefeu[.]fr - https://www.redpacketsecurity.com/krybit-ransomware-victim-www-pierrefeu-fr/
RedPacket Security
[KRYBIT] - Ransomware Victim: www[.]pierrefeu[.]fr - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[BOOBA PROJECT] - Ransomware Victim: Soni Medical Centre - https://www.redpacketsecurity.com/booba-project-ransomware-victim-soni-medical-centre/
RedPacket Security
[BOOBA PROJECT] - Ransomware Victim: Soni Medical Centre - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[BOOBA PROJECT] - Ransomware Victim: University of Illinois Chicago - https://www.redpacketsecurity.com/booba-project-ransomware-victim-university-of-illinois-chicago/
RedPacket Security
[BOOBA PROJECT] - Ransomware Victim: University of Illinois Chicago - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[WALLSTREET] - Ransomware Victim: Tronex A/S - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-tronex-a-s/
RedPacket Security
[WALLSTREET] - Ransomware Victim: Tronex A/S - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[BOOBA PROJECT] - Ransomware Victim: Raleigh Family Medicine - https://www.redpacketsecurity.com/booba-project-ransomware-victim-raleigh-family-medicine/
RedPacket Security
[BOOBA PROJECT] - Ransomware Victim: Raleigh Family Medicine - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[BOOBA PROJECT] - Ransomware Victim: EdgeEndo® USA - https://www.redpacketsecurity.com/booba-project-ransomware-victim-edgeendo-usa/
RedPacket Security
[BOOBA PROJECT] - Ransomware Victim: EdgeEndo® USA - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-100107 - extendthemes - Kubio AI Page Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-100107-extendthemes-kubio-ai-page-builder/
RedPacket Security
CVE Alert: CVE-2026-100107 - extendthemes - Kubio AI Page Builder - RedPacket Security
The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including,
CVE Alert: CVE-2026-92174 - gpriday - SiteOrigin Widgets Bundle - https://www.redpacketsecurity.com/cve-alert-cve-2026-92174-gpriday-siteorigin-widgets-bundle/
RedPacket Security
CVE Alert: CVE-2026-92174 - gpriday - SiteOrigin Widgets Bundle - RedPacket Security
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.73.2 via the 'theme'
CVE Alert: CVE-2026-100182 - wpchill - Download Monitor - https://www.redpacketsecurity.com/cve-alert-cve-2026-100182-wpchill-download-monitor/
RedPacket Security
CVE Alert: CVE-2026-100182 - wpchill - Download Monitor - RedPacket Security
The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all versions up to, and
CVE Alert: CVE-2026-92820 - SaturdayDrive - Ninja Forms - File Uploads - https://www.redpacketsecurity.com/cve-alert-cve-2026-92820-saturdaydrive-ninja-forms-file-uploads/
RedPacket Security
CVE Alert: CVE-2026-92820 - SaturdayDrive - Ninja Forms - File Uploads - RedPacket Security
The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external