CVE ID :CVE-2026-86596 Published : Nov. 2, 2026, 10:17 p.m. | 46 minutes ago Description :The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <= 260927 via the 'item_name' parameter parameter. This is due to insufficient sanitization...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-86596 - s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter

VERWANDTEARTIKEL

CVE-2026-71450 - Johnson Controls EasyIO Neo EC and CW Edge Controller Authentication Bypass

CVE-2026-120091 - Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host

CVE-2026-115215 - NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool

CVE-2026-115403 - NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full

CVE-2026-58873 - WindowManagerService Permission Bypass and Local Escalation of Privilege

CVE-2026-105475 - cPanel NUL Byte Injection Information Disclosure