https://cyberdeltaforce.ai/news/5f1699a09110909b94cd CyberDeltaForce en 2026-09-07T12:17:20.320Z Critical Unauthenticated Broken Access Control Vulnerability Tracked as CVE-2026-84238 https://cyberdeltaforce.ai/news/f5c857bf0af503557684 CyberDeltaForce en 2026-09-07T12:17:20.100Z CVE-2026-83627: The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up t https://cyberdeltaforce.ai/news/6c44b1a84c387a33ca70 CyberDeltaForce en 2026-09-07T12:17:18.850Z CVE-2026-75816: The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, https://cyberdeltaforce.ai/news/42bc268d3eaf47716e82 CyberDeltaForce en 2026-09-07T12:17:17.460Z CVE-2026-16310: The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.5 via the 'id' paramet https://cyberdeltaforce.ai/news/91ef10109d1e84ab67ad CyberDeltaForce en 2026-09-07T12:17:16.820Z CVE-2026-10196: The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object Injection in all v https://cyberdeltaforce.ai/news/c4681389c3fbdb232fb4 CyberDeltaForce en 2026-09-07T12:17:15.787Z CVE-2024-11080: The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via https://cyberdeltaforce.ai/news/c5ff9225f1750b6a5959 CyberDeltaForce en 2026-09-06T04:18:21.540Z Critical A use-after-free was found Vulnerability Tracked as CVE-2025-49794 https://cyberdeltaforce.ai/news/5a523206528f0b3f546d CyberDeltaForce en 2026-09-07T13:19:54.620Z CVE-2026-44005: vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and https://cyberdeltaforce.ai/news/a86e245400b9ee24396b CyberDeltaForce en 2026-09-07T13:19:18.933Z Critical A malicious SSH peer Vulnerability Tracked as CVE-2026-39830 https://cyberdeltaforce.ai/news/90600e0b4f2176580f85 CyberDeltaForce en 2026-09-07T13:18:36.523Z CVE-2026-29063: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutab https://cyberdeltaforce.ai/news/166368e5b024a5374276 CyberDeltaForce en 2026-09-07T13:17:29.797Z Critical The value function Vulnerability Tracked as CVE-2025-61140 https://cyberdeltaforce.ai/news/f96743f1a32e344f7e40 CyberDeltaForce en 2026-09-07T02:17:17.630Z Critical An authentication bypass exists Vulnerability Tracked as CVE-2026-16876 https://cyberdeltaforce.ai/news/0af2b6c55a6e9e4cf5f4 CyberDeltaForce en 2026-09-06T11:18:01.910Z Critical The SEO Flow by LupsOnline WordPress plugin Vulnerability Tracked as CVE-2026-78362 https://cyberdeltaforce.ai/news/12fcbf6e295bbb8d4a18 CyberDeltaForce en 2026-09-07T07:16:47.420Z Critical A was identified Vulnerability Tracked as CVE-2026-79698 https://cyberdeltaforce.ai/news/8c4f8ebf8b91c9c51983 CyberDeltaForce en 2026-09-07T07:16:45.903Z Critical A was determined Vulnerability Tracked as CVE-2026-79697 https://cyberdeltaforce.ai/news/c02df059c1595aeb2756 CyberDeltaForce en 2026-09-07T12:17:20.727Z Unauthenticated Denial of Service Attack Vulnerability Tracked as CVE-2026-84778 https://cyberdeltaforce.ai/news/731e0e5e29aeac3fe4d8 CyberDeltaForce en 2026-09-07T12:17:19.990Z CVE-2026-83625: The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via IP Address Header in all versions up to, and inclu https://cyberdeltaforce.ai/news/bbaf6e20f7309b67485a CyberDeltaForce en 2026-09-07T12:17:19.860Z CVE-2026-82712: Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker t https://cyberdeltaforce.ai/news/6c7fef5fde026bc324cd CyberDeltaForce en 2026-09-07T12:17:19.753Z CVE-2026-81543: The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This i https://cyberdeltaforce.ai/news/716f77f89669dffd643a CyberDeltaForce en 2026-09-07T12:17:19.537Z CVE-2026-78438: The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via LazyLoad Background Mutator in all versio https://cyberdeltaforce.ai/news/fa224592c69001455de4 CyberDeltaForce en 2026-09-07T12:17:19.230Z CVE-2026-77393: In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects https://cyberdeltaforce.ai/news/35ea002791ce2f78d730 CyberDeltaForce en 2026-09-07T12:17:17.773Z CVE-2026-18406: The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text https://cyberdeltaforce.ai/news/82f49291d75de1a54bcb CyberDeltaForce en 2026-09-07T12:17:17.567Z CVE-2026-18056: The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter in all versions up to, and inc https://cyberdeltaforce.ai/news/9be8a94e827460c390bd CyberDeltaForce en 2026-09-07T11:17:22.390Z CVE-2026-20502: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex https://cyberdeltaforce.ai/news/58fe1312a9a4074ca2a2 CyberDeltaForce en 2026-09-07T03:17:19.407Z Out-of-bounds write Vulnerability Tracked as CVE-2026-86313 https://cyberdeltaforce.ai/news/60d6fa5af3a1e8661417 CyberDeltaForce en 2026-09-07T13:18:45.610Z CVE-2026-32286: The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a n https://cyberdeltaforce.ai/news/00c1823a6ed25d96ab62 CyberDeltaForce en 2026-09-06T13:17:10.963Z OpenMAIC Vulnerability Tracked as CVE-2026-86259 https://cyberdeltaforce.ai/news/b916b1531539de40865d CyberDeltaForce en 2026-09-06T13:17:10.307Z PocketMine-MP Vulnerability Tracked as CVE-2022-51009 https://cyberdeltaforce.ai/news/f6a9a07c8bb71dccca5b CyberDeltaForce en 2026-09-07T13:19:52.227Z Improper Validation of Certificate Vulnerability Tracked as CVE-2026-43869 https://cyberdeltaforce.ai/news/11d7a792d35019cf0bc7 CyberDeltaForce en 2026-09-07T13:19:51.667Z An was discovered Vulnerability Tracked as CVE-2026-43003 https://cyberdeltaforce.ai/news/4ec342d2f5fa586fb33b CyberDeltaForce en 2026-09-07T13:19:50.293Z NGINX Plus and NGINX Open Source have a Vulnerability Tracked as CVE-2026-42945 https://cyberdeltaforce.ai/news/df6ad316d6cd22f25057 CyberDeltaForce en 2026-09-07T13:19:30.917Z Integer Overflow or Wraparound Vulnerability Tracked as CVE-2026-41605 https://cyberdeltaforce.ai/news/0f7fe384677fa5ee2b85 CyberDeltaForce en 2026-09-07T13:19:30.323Z Out-of-bounds Read Vulnerability Tracked as CVE-2026-41604 https://cyberdeltaforce.ai/news/38b527ef8b2558b0294e CyberDeltaForce en 2026-09-07T13:18:57.257Z CVE-2026-33810: When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a d https://cyberdeltaforce.ai/news/134926b4954d2da60a3b CyberDeltaForce en 2026-09-07T12:17:17.043Z CVE-2026-12843: The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verify