CVE ID :CVE-2026-14345 Published : July 7, 2026, 6:16 a.m. | 58 minutes ago Description :The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.12.7 via the 'postData'...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-14345 - WPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' Parameter

VERWANDTEARTIKEL

CVE-2026-8377 - Improper Authorization in Armiya Technologies' Access Control System

16-Year-Old Linux KVM Vulnerability Allows Malicious Guest to Corrupt Host Kernel Memory

CVE-2026-57867 - MicroRealEstate Authentication Bypass Vulnerability

CVE-2026-34158 - Coolify: Command injection via single-quote breakout in Docker Compose custom commands

CVE-2026-42200 - Coolify: PostgreSQL Init Script Path Traversal Leads to Arbitrary File Write and Root RCE

CVE-2026-42143 - Coolify: OS Command Injection via Persistent Volume Names - Root RCE on Managed Servers