CVE ID :CVE-2026-122001 Published : Nov. 7, 2026, 6:16 a.m. | 14 hours, 56 minutes ago Description :The Komfortkasse for WooCommerce WordPress plugin before 1.4.9 does not properly validate the authenticity of REST API requests, overriding WordPress's own nonce verification so that a request...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-122001 - Komfortkasse for WooCommerce < 1.4.9 - Administrator Account Creation via CSRF

VERWANDTEARTIKEL

CVE-2026-114713 - UnrealIRCd IRCv3 Label Message Tag Command Injection

CVE-2026-123615 - imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader

CVE-2026-123616 - imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loader

CVE-2026-123614 - imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow

CVE-2026-123604 - Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop

CVE-2026-123605 - Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Name