JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that allows any authenticated user to delete system audit log entries. Low-privileged...
Fresh 2026 Zero-Days & Newly Disclosed CVEs
Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions....
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions....
Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions....
Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions....
Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions....
Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions....