Cobalt Strike Beacon Detected - 106[.]12[.]61[.]28:80 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-106-12-61-28-port-80/
RedPacket Security
Cobalt Strike Beacon Detected - 106[.]12[.]61[.]28:80 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 47[.]105[.]36[.]109:443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-47-105-36-109-port-443-38/
RedPacket Security
Cobalt Strike Beacon Detected - 47[.]105[.]36[.]109:443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 14[.]225[.]212[.]124:30005 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-14-225-212-124-port-30005-4/
RedPacket Security
Cobalt Strike Beacon Detected - 14[.]225[.]212[.]124:30005 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 82[.]156[.]219[.]31:8443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-82-156-219-31-port-8443-22/
RedPacket Security
Cobalt Strike Beacon Detected - 82[.]156[.]219[.]31:8443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
CVE Alert: CVE-2026-110444 - TEAMPLUS TECHNOLOGY - TeamPlus Messenger - https://www.redpacketsecurity.com/cve-alert-cve-2026-110444-teamplus-technology-teamplus-messenger/
RedPacket Security
CVE Alert: CVE-2026-110444 - TEAMPLUS TECHNOLOGY - TeamPlus Messenger - RedPacket Security
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a
CVE Alert: CVE-2026-110445 - TEAMPLUS TECHNOLOGY - TeamPlus Messenger - https://www.redpacketsecurity.com/cve-alert-cve-2026-110445-teamplus-technology-teamplus-messenger/
RedPacket Security
CVE Alert: CVE-2026-110445 - TEAMPLUS TECHNOLOGY - TeamPlus Messenger - RedPacket Security
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into interacting with
CVE Alert: CVE-2026-77114 - danrossiter - Document Gallery - https://www.redpacketsecurity.com/cve-alert-cve-2026-77114-danrossiter-document-gallery/
RedPacket Security
CVE Alert: CVE-2026-77114 - danrossiter - Document Gallery - RedPacket Security
The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumber_webhook' Action Request Body in all versions up to, and
CVE Alert: CVE-2026-104767 - davefx - Membership & User Roles for WooCommerce (Automatic Role Changer) - https://www.redpacketsecurity.com/cve-alert-cve-2026-104767-davefx-membership-user-roles-for-woocommerce-automatic-role-changer/
RedPacket Security
CVE Alert: CVE-2026-104767 - davefx - Membership & User Roles for WooCommerce (Automatic Role Changer) - RedPacket Security
The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and
CVE Alert: CVE-2026-102251 - Tyche Softwares - Abandoned Cart Pro for WooCommerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-102251-tyche-softwares-abandoned-cart-pro-for-woocommerce/
RedPacket Security
CVE Alert: CVE-2026-102251 - Tyche Softwares - Abandoned Cart Pro for WooCommerce - RedPacket Security
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and
CVE Alert: CVE-2026-104764 - wpazleen - Post Export Import with Media - https://www.redpacketsecurity.com/cve-alert-cve-2026-104764-wpazleen-post-export-import-with-media/
RedPacket Security
CVE Alert: CVE-2026-104764 - wpazleen - Post Export Import with Media - RedPacket Security
The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization
CVE Alert: CVE-2026-103366 - latepoint - Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress - https://www.redpacketsecurity.com/cve-alert-cve-2026-103366-latepoint-appointment-booking-plugin-latepoint-calendar-scheduling-for-wordpress/
RedPacket Security
CVE Alert: CVE-2026-103366 - latepoint - Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress - RedPacket…
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in
CVE Alert: CVE-2026-93885 - blackworks1 - Cryptocurrency Donation Box – Bitcoin & Crypto Donations - https://www.redpacketsecurity.com/cve-alert-cve-2026-93885-blackworks1-cryptocurrency-donation-box-bitcoin-crypto-donations/
RedPacket Security
CVE Alert: CVE-2026-93885 - blackworks1 - Cryptocurrency Donation Box – Bitcoin & Crypto Donations - RedPacket Security
The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data_object Parameter
CVE Alert: CVE-2026-95816 - edgarrojas - Smart Forms – when you need more than just a contact form - https://www.redpacketsecurity.com/cve-alert-cve-2026-95816-edgarrojas-smart-forms-when-you-need-more-than-just-a-contact-form/
RedPacket Security
CVE Alert: CVE-2026-95816 - edgarrojas - Smart Forms – when you need more than just a contact form - RedPacket Security
The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' parameter
CVE Alert: CVE-2026-83592 - doctorwp - Contact Form DB for Enfold - https://www.redpacketsecurity.com/cve-alert-cve-2026-83592-doctorwp-contact-form-db-for-enfold/
RedPacket Security
CVE Alert: CVE-2026-83592 - doctorwp - Contact Form DB for Enfold - RedPacket Security
The Contact Form DB for Enfold plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form Field Values in all versions up to, and
CVE Alert: CVE-2026-107751 - kitae-park - Mang Board - https://www.redpacketsecurity.com/cve-alert-cve-2026-107751-kitae-park-mang-board/
RedPacket Security
CVE Alert: CVE-2026-107751 - kitae-park - Mang Board - RedPacket Security
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all versions up to, and including, 2.4.3 due
CVE Alert: CVE-2026-107631 - davidevalerio - Record of Consent Extension for Complianz - https://www.redpacketsecurity.com/cve-alert-cve-2026-107631-davidevalerio-record-of-consent-extension-for-complianz/
RedPacket Security
CVE Alert: CVE-2026-107631 - davidevalerio - Record of Consent Extension for Complianz - RedPacket Security
The Record of Consent Extension for Complianz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'uid' parameter in all versions up to,
CVE Alert: CVE-2026-90954 - Red Hat - Red Hat Hardened Images - https://www.redpacketsecurity.com/cve-alert-cve-2026-90954-red-hat-red-hat-hardened-images/
RedPacket Security
CVE Alert: CVE-2026-90954 - Red Hat - Red Hat Hardened Images - RedPacket Security
A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archive member, unlike the tar, cpio,
CVE Alert: CVE-2026-88829 - Red Hat - Red Hat Hardened Images - https://www.redpacketsecurity.com/cve-alert-cve-2026-88829-red-hat-red-hat-hardened-images/
RedPacket Security
CVE Alert: CVE-2026-88829 - Red Hat - Red Hat Hardened Images - RedPacket Security
A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests matching a URL prefix to a backend server, only
CVE Alert: CVE-2026-110284 - lifterlms - LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - https://www.redpacketsecurity.com/cve-alert-cve-2026-110284-lifterlms-lifterlms-wp-lms-for-elearning-online-courses-quizzes/
RedPacket Security
CVE Alert: CVE-2026-110284 - lifterlms - LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - RedPacket Security
The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and
CVE Alert: CVE-2026-104939 - F5 - NGINX Ingress Controller - https://www.redpacketsecurity.com/cve-alert-cve-2026-104939-f5-nginx-ingress-controller/
RedPacket Security
CVE Alert: CVE-2026-104939 - F5 - NGINX Ingress Controller - RedPacket Security
### Risk verdict
CVE Alert: CVE-2026-110618 - pppscn - SmsForwarder - https://www.redpacketsecurity.com/cve-alert-cve-2026-110618-pppscn-smsforwarder/
RedPacket Security
CVE Alert: CVE-2026-110618 - pppscn - SmsForwarder - RedPacket Security
SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to