CVE ID :CVE-2026-86794 Published : Oct. 29, 2026, 6:17 a.m. | 6 hours, 7 minutes ago Description :The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks when processing public event submissions, and does not escape several of the submitted values before...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-86794 - Community Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission Form

VERWANDTEARTIKEL

HTTP2Shell: Kritische Brotli-Schwachstelle gefährdet zahlreiche Anwendungen und IT-Infrastrukturen

Hackers Exploit Critical Cisco SD-WAN 0-Day Flaw to Deploy KeyDrift Malware and Steal Encryption Keys

Chinese Hackers Use Secret Silent Train Network to Exploit Zero-Days Against U.S. Government and Defense

Dell PowerProtect Data Domain: Sieben kritische Schwachstellen bedrohen Backup-Systeme

CVE-2026-119028 - oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values

CVE-2026-97854 - Yamaha Wireless LAN Router OS Command Injection Vulnerability