CVE ID :CVE-2026-93754 Published : Nov. 7, 2026, 2:29 a.m. | 43 minutes ago Description :The payever – WooCommerce Gateway plugin for WordPress is vulnerable to arbitrary file upload leading to remote code execution in various versions up to, and including, 4.8.0. Three WooCommerce-API...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-93754 - payever – WooCommerce Gateway <= 4.8.0 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

VERWANDTEARTIKEL

CVE-2026-104913 - Interactive Real Estate <= 2.6.0- Authenticated (Subscriber+) Arbitrary File Upload via Project Import ZIP with Crafted image_map.json

CVE-2026-109469 - Entra Device Registration Elevation of Privilege Vulnerability

CVE-2026-59104 - UgCS server HCI authentication bypass with empty credentials

CVE-2026-68935 - Chartbrew: SSRF to Internal Network via User-Controlled allowPrivateHost Flag on API Connections

CVE-2026-50240 - Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount

CVE-2026-86005 - Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in Chartbrew