🚨 CVE-2026-40765
Unauthenticated Cross Site Scripting (XSS) in collectchat <= 2.4.9 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in collectchat <= 2.4.9 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress collectchat Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-40768
Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions.
🎖@cveNotify
Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions.
🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Salon booking system Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-42357
Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access.
This issue affects Apache DolphinScheduler versions prior to 3.4.2.
Users are recommended to upgrade to version 3.4.2, which fixes this issue.
🎖@cveNotify
Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access.
This issue affects Apache DolphinScheduler versions prior to 3.4.2.
Users are recommended to upgrade to version 3.4.2, which fixes this issue.
🎖@cveNotify
🚨 CVE-2026-42629
Unauthenticated Broken Authentication in PowerPack Pro for Elementor < v2.13.0 versions.
🎖@cveNotify
Unauthenticated Broken Authentication in PowerPack Pro for Elementor < v2.13.0 versions.
🎖@cveNotify
Patchstack
Broken Authentication in WordPress PowerPack Pro for Elementor Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-45436
Subscriber Broken Access Control in WPBakery Page Builder <= 8.7.2 versions.
🎖@cveNotify
Subscriber Broken Access Control in WPBakery Page Builder <= 8.7.2 versions.
🎖@cveNotify
Patchstack
Broken Access Control in WordPress WPBakery Page Builder Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-47340
Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinScheduler.
This issue affects Apache DolphinScheduler: before 3.4.2.
Users are recommended to upgrade to version 3.4.2, which fixes the issue.
🎖@cveNotify
Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinScheduler.
This issue affects Apache DolphinScheduler: before 3.4.2.
Users are recommended to upgrade to version 3.4.2, which fixes the issue.
🎖@cveNotify
🚨 CVE-2026-48616
Rocket.Chat versions <8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, 7.10.13 has an access control vulnerability in Livechat files. Protected file downloads at /file-upload/:fileId/:name authorize livechat access using rc_room_type=l with rc_rid+rc_token, but the authorization path does not verify that rc_rid matches the requested file's rid. Furthermore, :fileId is predictable via sequential MongoDB IDs, and :name can be anything, allowing unauthenticated discovery of all uploaded files.
🎖@cveNotify
Rocket.Chat versions <8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, 7.10.13 has an access control vulnerability in Livechat files. Protected file downloads at /file-upload/:fileId/:name authorize livechat access using rc_room_type=l with rc_rid+rc_token, but the authorization path does not verify that rc_rid matches the requested file's rid. Furthermore, :fileId is predictable via sequential MongoDB IDs, and :name can be anything, allowing unauthenticated discovery of all uploaded files.
🎖@cveNotify
GitHub
fix: imported fixes 06-11-26 by julio-rocketchat · Pull Request #40889 · RocketChat/Rocket.Chat
Proposed changes (including videos or screenshots)
All approvals have already been given in the private fork.
Issue(s)
VLN-297, VLN-386, VLN-406, VLN-400
Steps to test or reproduce
N/A
Further comm...
All approvals have already been given in the private fork.
Issue(s)
VLN-297, VLN-386, VLN-406, VLN-400
Steps to test or reproduce
N/A
Further comm...
🚨 CVE-2026-48929
Rocket.Chat in versions <8.5.1, <8.4.4, <8.3.6, <8.2.6, <8.1.6, <8.0.7, <7.13.9, and <7.10.13 is vulnerable to unauthenticated file deletion. The deleteFileMessage Meteor method permanently deletes any uploaded file by ID without requiring authentication. When called via an unauthenticated DDP WebSocket connection, Meteor.userId() returns null, causing the authorization check to be skipped. Execution falls through to FileUpload.getStore('Uploads').deleteById(fileID), which removes the file from storage and database unconditionally. File IDs are discoverable from public channel message payloads and download URLs.
🎖@cveNotify
Rocket.Chat in versions <8.5.1, <8.4.4, <8.3.6, <8.2.6, <8.1.6, <8.0.7, <7.13.9, and <7.10.13 is vulnerable to unauthenticated file deletion. The deleteFileMessage Meteor method permanently deletes any uploaded file by ID without requiring authentication. When called via an unauthenticated DDP WebSocket connection, Meteor.userId() returns null, causing the authorization check to be skipped. Execution falls through to FileUpload.getStore('Uploads').deleteById(fileID), which removes the file from storage and database unconditionally. File IDs are discoverable from public channel message payloads and download URLs.
🎖@cveNotify
GitHub
fix: imported fixes 06-11-26 by julio-rocketchat · Pull Request #40889 · RocketChat/Rocket.Chat
Proposed changes (including videos or screenshots)
All approvals have already been given in the private fork.
Issue(s)
VLN-297, VLN-386, VLN-406, VLN-400
Steps to test or reproduce
N/A
Further comm...
All approvals have already been given in the private fork.
Issue(s)
VLN-297, VLN-386, VLN-406, VLN-400
Steps to test or reproduce
N/A
Further comm...
🚨 CVE-2026-49072
Unauthenticated Broken Access Control in WooCommerce Anti-Fraud <= 7.2.6 versions.
🎖@cveNotify
Unauthenticated Broken Access Control in WooCommerce Anti-Fraud <= 7.2.6 versions.
🎖@cveNotify
Patchstack
Broken Access Control in WordPress WooCommerce Anti-Fraud Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-49074
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress JetEngine Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-49107
Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.
🎖@cveNotify
Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.
🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Thrive Apprentice Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-49778
Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro <= 2.9.4 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro <= 2.9.4 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WPFunnels Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-52705
Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions.
🎖@cveNotify
Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions.
🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress SigmaForms Pro – AI Generated Forms Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-54188
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress JetEngine Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-54189
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress JetEngine Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.