Skip to content

Commit 71a18db

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-pm8w-jq9r-x5rp GHSA-2c4c-5wf5-f8m7 GHSA-3p66-r746-8vwf GHSA-qpw4-8jph-882q GHSA-37g5-xxx3-2p4q GHSA-3wcx-px3j-79f4 GHSA-86pc-m9xh-3jg9 GHSA-9296-v3fr-j92j GHSA-9w5f-xhp2-5782 GHSA-h2h4-5m64-m273 GHSA-jp4w-vjf8-5c76 GHSA-m38f-j4wj-5268 GHSA-mhqr-7m5g-wj8v GHSA-q26f-fvh3-5p4h GHSA-rxpj-7qvf-xv32 GHSA-vqf2-5h8g-fv6r
1 parent 057b01c commit 71a18db

16 files changed

Lines changed: 445 additions & 4 deletions

File tree

‎advisories/unreviewed/2026/02/GHSA-pm8w-jq9r-x5rp/GHSA-pm8w-jq9r-x5rp.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-pm8w-jq9r-x5rp",
4-
"modified": "2026-04-06T12:32:09Z",
4+
"modified": "2026-04-07T09:31:22Z",
55
"published": "2026-02-09T15:30:31Z",
66
"aliases": [
77
"CVE-2025-14831"
@@ -51,6 +51,10 @@
5151
"type": "WEB",
5252
"url": "https://access.redhat.com/errata/RHSA-2026:6630"
5353
},
54+
{
55+
"type": "WEB",
56+
"url": "https://access.redhat.com/errata/RHSA-2026:6737"
57+
},
5458
{
5559
"type": "WEB",
5660
"url": "https://access.redhat.com/security/cve/CVE-2025-14831"

‎advisories/unreviewed/2026/03/GHSA-2c4c-5wf5-f8m7/GHSA-2c4c-5wf5-f8m7.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-2c4c-5wf5-f8m7",
4-
"modified": "2026-03-06T21:30:34Z",
4+
"modified": "2026-04-07T09:31:22Z",
55
"published": "2026-03-05T06:30:25Z",
66
"aliases": [
77
"CVE-2026-27352"

‎advisories/unreviewed/2026/03/GHSA-3p66-r746-8vwf/GHSA-3p66-r746-8vwf.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-3p66-r746-8vwf",
4-
"modified": "2026-03-09T21:31:34Z",
4+
"modified": "2026-04-07T09:31:22Z",
55
"published": "2026-03-05T06:30:25Z",
66
"aliases": [
77
"CVE-2026-27358"

‎advisories/unreviewed/2026/03/GHSA-qpw4-8jph-882q/GHSA-qpw4-8jph-882q.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-qpw4-8jph-882q",
4-
"modified": "2026-03-06T21:30:35Z",
4+
"modified": "2026-04-07T09:31:22Z",
55
"published": "2026-03-05T06:30:26Z",
66
"aliases": [
77
"CVE-2026-27367"

‎advisories/unreviewed/2026/04/GHSA-37g5-xxx3-2p4q/GHSA-37g5-xxx3-2p4q.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-37g5-xxx3-2p4q",
4+
"modified": "2026-04-07T09:31:22Z",
5+
"published": "2026-04-07T09:31:22Z",
6+
"aliases": [
7+
"CVE-2026-34899"
8+
],
9+
"details": "Missing Authorization vulnerability in Eniture technology LTL Freight Quotes – Worldwide Express Edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – Worldwide Express Edition: from n/a through 5.2.1.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34899"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://patchstack.com/database/wordpress/plugin/ltl-freight-quotes-worldwide-express-edition/vulnerability/wordpress-ltl-freight-quotes-worldwide-express-edition-plugin-5-2-1-broken-access-control-vulnerability?_s_id=cve"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-862"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-04-07T09:16:21Z"
35+
}
36+
}

‎advisories/unreviewed/2026/04/GHSA-3wcx-px3j-79f4/GHSA-3wcx-px3j-79f4.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3wcx-px3j-79f4",
4+
"modified": "2026-04-07T09:31:22Z",
5+
"published": "2026-04-07T09:31:22Z",
6+
"aliases": [
7+
"CVE-2026-5465"
8+
],
9+
"details": "The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.3. This is due to the `UpdateProviderCommandHandler` failing to validate changes to the `externalId` field when a Provider (Employee) user updates their own profile. The `externalId` maps directly to a WordPress user ID and is passed to `wp_set_password()` and `wp_update_user()` without authorization checks. This makes it possible for authenticated attackers, with Provider-level (Employee) access and above, to take over any WordPress account — including Administrator — by injecting an arbitrary `externalId` value when updating their own provider profile.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5465"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://plugins.trac.wordpress.org/browser/ameliabooking/tags/2.1.3/src/Application/Commands/User/Provider/UpdateProviderCommandHandler.php#L146"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://plugins.trac.wordpress.org/browser/ameliabooking/tags/2.1.3/src/Application/Commands/User/Provider/UpdateProviderCommandHandler.php#L219"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://plugins.trac.wordpress.org/browser/ameliabooking/tags/2.1.3/src/Application/Commands/User/Provider/UpdateProviderCommandHandler.php#L239"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://plugins.trac.wordpress.org/browser/ameliabooking/tags/2.1.3/src/Application/Controller/User/Provider/UpdateProviderController.php#L30"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://plugins.trac.wordpress.org/changeset/3499608/ameliabooking/trunk/src/Application/Commands/User/Provider/UpdateProviderCommandHandler.php"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a4204099-1065-4167-8b42-3da25945236c?source=cve"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-639"
50+
],
51+
"severity": "HIGH",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-04-07T07:16:24Z"
55+
}
56+
}

‎advisories/unreviewed/2026/04/GHSA-86pc-m9xh-3jg9/GHSA-86pc-m9xh-3jg9.json‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-86pc-m9xh-3jg9",
4+
"modified": "2026-04-07T09:31:22Z",
5+
"published": "2026-04-07T09:31:22Z",
6+
"aliases": [
7+
"CVE-2025-15611"
8+
],
9+
"details": "The Popup Box WordPress plugin before 5.5.0 does not properly validate nonces in the add_or_edit_popupbox() function before saving popup data, allowing unauthenticated attackers to perform Cross-Site Request Forgery attacks. When an authenticated admin visits a malicious page, the attacker can create or modify popups with arbitrary JavaScript that executes in the admin panel and frontend.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15611"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://wpscan.com/vulnerability/089ea763-2421-4089-a220-251421f7f226"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2026-04-07T07:16:23Z"
28+
}
29+
}

‎advisories/unreviewed/2026/04/GHSA-9296-v3fr-j92j/GHSA-9296-v3fr-j92j.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-9296-v3fr-j92j",
4+
"modified": "2026-04-07T09:31:22Z",
5+
"published": "2026-04-07T09:31:22Z",
6+
"aliases": [
7+
"CVE-2026-1114"
8+
],
9+
"details": "In parisneo/lollms version 2.1.0, the application's session management is vulnerable to improper access control due to the use of a weak secret key for signing JSON Web Tokens (JWT). This vulnerability allows an attacker to perform an offline brute-force attack to recover the secret key. Once the secret key is obtained, the attacker can forge administrative tokens by modifying the JWT payload and resigning it with the cracked secret. This enables unauthorized users to escalate privileges, impersonate the administrator, and gain access to restricted endpoints. The issue is resolved in version 2.2.0.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1114"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://github.com/parisneo/lollms/commit/a3b2b82b84d537a9da63e63a370a6a8ad55fed34"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://huntr.com/bounties/608b2a3b-2225-438e-9e61-ffbfdec2ed89"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-284"
34+
],
35+
"severity": "CRITICAL",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-04-07T07:16:23Z"
39+
}
40+
}

‎advisories/unreviewed/2026/04/GHSA-9w5f-xhp2-5782/GHSA-9w5f-xhp2-5782.json‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-9w5f-xhp2-5782",
4+
"modified": "2026-04-07T09:31:22Z",
5+
"published": "2026-04-07T09:31:22Z",
6+
"aliases": [
7+
"CVE-2026-1900"
8+
],
9+
"details": "The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1900"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://wpscan.com/vulnerability/dc10b627-7981-4c53-bc9d-e87418f3fcfc"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2026-04-07T07:16:23Z"
28+
}
29+
}

‎advisories/unreviewed/2026/04/GHSA-h2h4-5m64-m273/GHSA-h2h4-5m64-m273.json‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-h2h4-5m64-m273",
4+
"modified": "2026-04-07T09:31:22Z",
5+
"published": "2026-04-07T09:31:22Z",
6+
"aliases": [
7+
"CVE-2026-33227"
8+
],
9+
"details": "Improper validation and restriction of a classpath path name vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All.\n\nIn two instances (when creating a Stomp consumer and also browsing messages in the Web console) an authenticated user provided \"key\" value could be constructed to traverse the classpath due to path concatenation. As a result, the application is exposed to a classpath path resource loading vulnerability that could potentially be chained together with another attack to lead to exploit.This issue affects Apache ActiveMQ Client: before 5.19.3, from 6.0.0 before 6.2.2; Apache ActiveMQ Broker: before 5.19.3, from 6.0.0 before 6.2.2; Apache ActiveMQ All: before 5.19.3, from 6.0.0 before 6.2.2.\n\nUsers are recommended to upgrade to version 5.19.4 or 6.2.3, which fixes the issue. Note: 5.19.3 and 6.2.2 also fix this issue, but that is limited to non-Windows environments due to a path separator resolution bug fixed in 5.19.4 and 6.2.3.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33227"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://activemq.apache.org/security-advisories.data/CVE-2026-33227-announcement.txt"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "http://www.openwall.com/lists/oss-security/2026/04/06/4"
24+
}
25+
],
26+
"database_specific": {
27+
"cwe_ids": [
28+
"CWE-22"
29+
],
30+
"severity": null,
31+
"github_reviewed": false,
32+
"github_reviewed_at": null,
33+
"nvd_published_at": "2026-04-07T09:16:20Z"
34+
}
35+
}

0 commit comments

Comments
 (0)