Sicherheitslücken (CVE)CVE-2026-120242 | Ruijie RG-ES205GC ESW_1.0(1)B1P48 Cloud Management set_cloud_serverUrl.cgi url cross site scripting (EUVD-2026-114884)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-88942 | Woobewoo Product Filter for WooCommerce by WBW Plugin up to 3.4.6 on WordPress Setting getVar wpf_fid cross site scripting (EUVD-2026-114606)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-119162 | specialk User Submitted Posts Plugin up to 20260916 on WordPress user-submitted-content cross site scripting (EUVD-2026-114603)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-107765 | marketingfire Discussion Board Plugin up to 2.6.0 on WordPress Output Escaping ctdb_filter_comment_author_name user_url cross site scripting (EUVD-2026-114602)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-116546 | WP Job Portal Job Portal Plugin up to 2.7.0 on WordPress degreetitle cross site scripting (EUVD-2026-114600)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-120019 | BoldGrid W3 Total Cache Plugin up to 2.10.7 on WordPress Input Sanitization comment cross site scripting (EUVD-2026-114597)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-119089 | ThirstyAffiliates Plugin up to 3.12.1 on WordPress Comment Content comment cross site scripting (EUVD-2026-114598)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-116522 | comesio Relevanssi Plugin up to 4.28.5 on WordPress comment cross site scripting (EUVD-2026-114599)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111592 | PublishPress Authors Plugin up to 4.17.0 on WordPress name cross site scripting (EUVD-2026-114646)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-119065 | arosoft Shipping Zones by Drawing for WooCommerce Plugin up to 3.3.0 on WordPress Checkout Field szbd_checkout_field_update_order_meta szbd-picked cross site scripting (EUVD-2026-114614)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-120242 | Ruijie RG-ES205GC ESW_1.0(1)B1P48 Cloud Management set_cloud_serverUrl.cgi url cross site scripting (EUVD-2026-114884)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-119162 | specialk User Submitted Posts Plugin up to 20260916 on WordPress user-submitted-content cross site scripting (EUVD-2026-114603)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-116546 | WP Job Portal Job Portal Plugin up to 2.7.0 on WordPress degreetitle cross site scripting (EUVD-2026-114600)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-120019 | BoldGrid W3 Total Cache Plugin up to 2.10.7 on WordPress Input Sanitization comment cross site scripting (EUVD-2026-114597)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-119089 | ThirstyAffiliates Plugin up to 3.12.1 on WordPress Comment Content comment cross site scripting (EUVD-2026-114598)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-116522 | comesio Relevanssi Plugin up to 4.28.5 on WordPress comment cross site scripting (EUVD-2026-114599)(01.11.2026 um 22:59 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111592 | PublishPress Authors Plugin up to 4.17.0 on WordPress name cross site scripting (EUVD-2026-114646)(01.11.2026 um 22:59 Uhr)

•

Intelligence View

⚡ tsecurity.de Intelligence

Low Level: php

IT Security Video Low Level 22.10.2026, 19:23 Uhr 1 Min. Lesezeit

Video abspielen

Video von Low Level auf YouTube: Check out the full write up here: https://calif.io/php2shell/ And shout out to LCFR_hax for the work on this…

BeitragSeite↗ Quelle (Low Level)

Check out the full write up here: https://calif.io/php2shell/

And shout out to LCFR_hax for the work on this: https://x.com/lcfr_hax/

🏫 MY COURSES

Sign-up for my FREE 3-Day C Course: https://lowlevel.academy

🎙️PODCAST

Get in depth breakdowns of latest cyber news: https://www.lowdownpod.com/

🔥SOCIALS

Check out my other stuff: https://lowlevel.tv

🚀 Auf tsecurity.de entdecken

Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald

Community Rating & Social Proof

⭐ Leser-Wertung

–

Ø / 5.0

Nog geen recensies van lezers

Was deze pagina nuttig?

🚀 Auf tsecurity.de entdecken

Verwant Story Cluster & Sources (vector AI)

7 Bronnen

CVE-2026-116546 | WP Job Portal Job Portal Plugin up to 2.7.0 on WordPress degreetitle cross site scripting (EUVD-2026-114600)

6 andere bronnen

VulDB Updates1 uur geledenCVE-2026-120019 | BoldGrid W3 Total Cache Plugin up to 2.10.7 on WordPress Input Sanitization comment cross site scripting (EUVD-2026-114597) VulDB Updates1 uur geledenCVE-2026-119089 | ThirstyAffiliates Plugin up to 3.12.1 on WordPress Comment Content comment cross site scripting (EUVD-2026-114598) VulDB Updates1 uur geledenCVE-2026-116522 | comesio Relevanssi Plugin up to 4.28.5 on WordPress comment cross site scripting (EUVD-2026-114599) VulDB Updates1 uur geledenCVE-2026-111592 | PublishPress Authors Plugin up to 4.17.0 on WordPress name cross site scripting (EUVD-2026-114646) VulDB Updates1 uur geledenCVE-2026-116548 | e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.10 on WordPress optionals cross site scripting (EUVD-2026-114612) VulDB Updates1 uur geledenCVE-2026-118070 | Welcart E-Commerce Plugin up to 2.12.5 on WordPress gid cross site scripting (EUVD-2026-114609)

Open de analyse

3 Bronnen

CVE-2026-88942 | Woobewoo Product Filter for WooCommerce by WBW Plugin up to 3.4.6 on WordPress Setting getVar wpf_fid cross site scripting (EUVD-2026-114606)

2 andere bronnen

VulDB Updates1 uur geledenCVE-2026-107765 | marketingfire Discussion Board Plugin up to 2.6.0 on WordPress Output Escaping ctdb_filter_comment_author_name user_url cross site scripting (EUVD-2026-114602) VulDB Updates1 uur geledenCVE-2026-119065 | arosoft Shipping Zones by Drawing for WooCommerce Plugin up to 3.3.0 on WordPress Checkout Field szbd_checkout_field_update_order_meta szbd-picked cross site scripting (EUVD-2026-114614)

Open de analyse