CVE ID :CVE-2026-92797 Published : Oct. 28, 2026, 7:48 a.m. | 35 minutes ago Description :The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-92797 - Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter

VERWANDTEARTIKEL

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

REDAXO: Kritische Authentifizierungsumgehung in Core vor 5.21.4 ermöglicht Admin-Zugriff

CVE-2026-48356: Adobe Commerce und Magento mit aktiv ausgenutzter kritischer Schwachstelle

CVE-2026-111120 - VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task

CVE-2026-109218 - Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass

CVE-2026-109384 - The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public /form/submission/ Multipart Upload