CVE Alert: CVE-2026-92798 - wpeverest - User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-92798-wpeverest-user-registration-membership-free-paid-memberships-subscriptions-content-restriction-user-profile-custom-user-registration-login-builder/
RedPacket Security
CVE Alert: CVE-2026-92798 - wpeverest - User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction…
The User Registration & Membership plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 5.2.8 This is due
CVE Alert: CVE-2026-96660 - wpeverest - User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-96660-wpeverest-user-registration-membership-free-paid-memberships-subscriptions-content-restriction-user-profile-custom-user-registration-login-builder/
RedPacket Security
CVE Alert: CVE-2026-96660 - wpeverest - User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction…
The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login
CVE Alert: CVE-2026-111881 - FreeRDP - FreeRDP - https://www.redpacketsecurity.com/cve-alert-cve-2026-111881-freerdp-freerdp/
RedPacket Security
CVE Alert: CVE-2026-111881 - FreeRDP - FreeRDP - RedPacket Security
FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to
CVE Alert: CVE-2026-100316 - davidanderson - European VAT Compliance Assistant for WooCommerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-100316-davidanderson-european-vat-compliance-assistant-for-woocommerce/
RedPacket Security
CVE Alert: CVE-2026-100316 - davidanderson - European VAT Compliance Assistant for WooCommerce - RedPacket Security
The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CF-IPCountry Header in all
CVE Alert: CVE-2026-111110 - stiofansisland - Payment forms, Buy now buttons, and Invoicing System | GetPaid - https://www.redpacketsecurity.com/cve-alert-cve-2026-111110-stiofansisland-payment-forms-buy-now-buttons-and-invoicing-system-getpaid/
RedPacket Security
CVE Alert: CVE-2026-111110 - stiofansisland - Payment forms, Buy now buttons, and Invoicing System | GetPaid - RedPacket Security
The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mmdwqzpoxadd'
CVE Alert: CVE-2026-111882 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111882-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111882 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows IdP-authenticated users to
CVE Alert: CVE-2026-111880 - FreeRDP - FreeRDP - https://www.redpacketsecurity.com/cve-alert-cve-2026-111880-freerdp-freerdp/
RedPacket Security
CVE Alert: CVE-2026-111880 - FreeRDP - FreeRDP - RedPacket Security
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset.
CVE Alert: CVE-2026-111897 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111897-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111897 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted editors to manage attachments of FAQs
CVE Alert: CVE-2026-111907 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111907-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111907 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database endpoint, which executes database
CVE Alert: CVE-2026-111898 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111898-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111898 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to take over local accounts by matching
CVE Alert: CVE-2026-111901 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111901-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111901 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticated faqs and search API endpoints.
CVE Alert: CVE-2026-111884 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111884-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111884 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password when changing an account e-mail in the user control panel
CVE Alert: CVE-2026-111909 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111909-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111909 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated non-superadmin users with delete_user
CVE Alert: CVE-2026-111908 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111908-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111908 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authorization vulnerability in the PUT /api/v3.1/faq/update
Cobalt Strike Beacon Detected - 175[.]124[.]145[.]102:443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-175-124-145-102-port-443/
RedPacket Security
Cobalt Strike Beacon Detected - 175[.]124[.]145[.]102:443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 59[.]110[.]28[.]230:443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-59-110-28-230-port-443-25/
RedPacket Security
Cobalt Strike Beacon Detected - 59[.]110[.]28[.]230:443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 106[.]53[.]168[.]218:443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-106-53-168-218-port-443-2/
RedPacket Security
Cobalt Strike Beacon Detected - 106[.]53[.]168[.]218:443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 43[.]136[.]92[.]170:8443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-43-136-92-170-port-8443/
RedPacket Security
Cobalt Strike Beacon Detected - 43[.]136[.]92[.]170:8443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 118[.]126[.]95[.]117:8081 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-118-126-95-117-port-8081-2/
RedPacket Security
Cobalt Strike Beacon Detected - 118[.]126[.]95[.]117:8081 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 101[.]35[.]217[.]145:8081 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-101-35-217-145-port-8081-3/
RedPacket Security
Cobalt Strike Beacon Detected - 101[.]35[.]217[.]145:8081 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 222[.]255[.]215[.]42:30005 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-222-255-215-42-port-30005-5/
RedPacket Security
Cobalt Strike Beacon Detected - 222[.]255[.]215[.]42:30005 - RedPacket Security
Cobalt Strike Beacon Detection Alerts