CISA Adds 8 Exploited Flaws to KEV, Sets April-May 2026 Federal Deadlines The Hacker News
cyberintel.kalymoon.com · 29794 articles · updated every 4 hours · grows forever
CISA Adds 8 Exploited Flaws to KEV, Sets April-May 2026 Federal Deadlines The Hacker News
A vulnerability classified as critical has been found in ThemeHigh Stripe Payment Gateway for WooCommerce Plugin up to 5.0.7 on WordPress. The impacted element is an unknown function. This manipulatio…
A vulnerability classified as critical was found in WebToffee Smart Coupons for WooCommerce Plugin up to 2.2.x on WordPress. This affects an unknown function. Such manipulation leads to missing author…
A vulnerability, which was classified as critical , has been found in Unlimited Elements For Elementor Plugin up to 2.0.8 on WordPress. This impacts an unknown function. Performing a manipulation resu…
A vulnerability, which was classified as critical , was found in VideoWhisper Broadcast Live Video Plugin up to 7.1.2 on WordPress. Affected is an unknown function. Executing a manipulation can lead t…
A vulnerability has been found in edward_plainview MyCryptoCheckout Plugin up to 2.161 on WordPress and classified as problematic . Affected by this vulnerability is an unknown functionality. The mani…
A vulnerability was found in StoreApps Smart Manager Plugin up to 8.85.0 on WordPress and classified as critical . Affected by this issue is some unknown functionality. The manipulation results in inc…
A vulnerability was found in Melapress WP Activity Log Plugin up to 5.6.3 on WordPress. It has been classified as problematic . This affects an unknown part. This manipulation causes cross site script…
A vulnerability was found in bgermann CformsII Plugin up to 15.1.3 on WordPress. It has been declared as problematic . This vulnerability affects unknown code. Such manipulation leads to cross-site re…
A vulnerability was found in Perl up to 5.43.10 on 32-bit. It has been rated as critical . This issue affects the function Perl_study_chunk of the file regcomp_study.c . Performing a manipulation resu…
A vulnerability categorized as critical has been discovered in eMagicOne Store Manager Plugin up to 1.3.2 on WordPress. Impacted is an unknown function. Executing a manipulation can lead to sql inject…
A vulnerability identified as critical has been detected in Crocoblock JetEngine Plugin up to 3.8.8.1 on WordPress. The affected element is an unknown function. The manipulation leads to sql injection…
A vulnerability labeled as critical has been found in WP Sunshine Sunshine Photo Cart Plugin up to 3.6.7 on WordPress. The impacted element is an unknown function. The manipulation results in missing …
A vulnerability marked as problematic has been reported in Linethemes NanoCare Plugin up to 1.2.1 on WordPress. This affects an unknown function. This manipulation causes missing authorization. This v…
A vulnerability described as problematic has been identified in SePay Gateway Plugin up to 1.1.20 on WordPress. This impacts an unknown function. Such manipulation leads to missing authorization. This…
A vulnerability classified as problematic has been found in Zyxel GS1200-5v3, GS1200-8v3, GS1200-5HPv3, GS1200-8HPv3 and GS1200-10v3 . Affected is an unknown function of the component HTTP Request Han…
A vulnerability classified as critical was found in BINGOS Archive::Tar up to 3.07 on Perl. Affected by this vulnerability is the function _make_special_file of the component File Extraction Handler .…
A vulnerability, which was classified as critical , has been found in BINGOS Archive::Tar up to 3.07 on Perl. Affected by this issue is the function _make_special_file . The manipulation leads to link…
A vulnerability, which was classified as problematic , was found in BINGOS Archive::Tar up to 3.9 on Perl. This affects the function _read_tar of the component Header Handler . The manipulation result…
A vulnerability has been found in GDPR Cookies Module up to 1.3.4 on Backdrop and classified as problematic . This vulnerability affects unknown code. This manipulation of the argument Info content ca…
A vulnerability was found in vllm-project vllm 0.19.0 and classified as problematic . This issue affects some unknown processing of the component OpenAI-compatible Serving Path . Such manipulation lea…
A vulnerability was found in Squirrel up to 3.2 . It has been classified as critical . Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the component Cnut File Handler . Perfor…
A vulnerability was found in CodeAstro Leave Management System 1.0 . It has been declared as critical . The affected element is an unknown function of the file /admin/add_staff.php . Executing a manip…
A vulnerability was found in koa router 14.x . It has been rated as critical . The impacted element is an unknown function. The manipulation leads to improper access controls. This vulnerability is li…