WordPress GamiPress plugin <= 8.0.7 - SQL Injection vulnerability
Newly collected advisory
CVE-2026-112837
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
1115 source records · 1002 groupsSecurityWordPress Helion theme <= 1.1.12 - PHP Object Injection vulnerability
WordPress Helion theme <= 1.1.12 - PHP Object Injection vulnerability
Newly collected advisory
CVE-2026-112852
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerability
WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerability
Newly collected advisory
CVE-2026-112849
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability
WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability
Newly collected advisory
CVE-2026-112863
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress Knit Pay plugin <= 9.6.3.0 - Broken Access Control vulnerability
WordPress Knit Pay plugin <= 9.6.3.0 - Broken Access Control vulnerability
Newly collected advisory
CVE-2026-112821
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability2 source records
Newly collected advisory · 2 entries
- WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
Newly collected advisory
CVE-2026-112835
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
- WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
Newly collected advisory
CVE-2026-112838
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress WPMobile.App plugin <= 11.86 - Broken Access Control vulnerability
WordPress WPMobile.App plugin <= 11.86 - Broken Access Control vulnerability
Newly collected advisory
CVE-2026-112359
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress Your Dress theme <= 1.4.1 - Local File Inclusion vulnerability
WordPress Your Dress theme <= 1.4.1 - Local File Inclusion vulnerability
Newly collected advisory
CVE-2026-112850
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityXDG Desktop Portal: Arbitrary file access via SaveFiles "files" option path traversal
XDG Desktop Portal: Arbitrary file access via SaveFiles "files" option path traversal
Newly collected advisory
CVE-2026-55888
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityXDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key
XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key
Newly collected advisory
CVE-2026-55889
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet Characters
Zimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet Characters
Newly collected advisory
CVE-2026-93633
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar CANCEL/REQUEST Organizer
Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar CANCEL/REQUEST Organizer
Newly collected advisory
CVE-2026-93627
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REPLY Attendee Response
Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REPLY Attendee Response
Newly collected advisory
CVE-2026-93628
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REQUEST Organizer Identity
Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REQUEST Organizer Identity
Newly collected advisory
CVE-2026-93629
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages Parameter
Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages Parameter
Newly collected advisory
CVE-2026-10632
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File Records
Zimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File Records
Newly collected advisory
CVE-2026-93634
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address
Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address
Newly collected advisory
CVE-2026-115785
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite Email HTML Sanitizer Bypass via Hostname Canonicalization
Zimbra Collaboration Suite Email HTML Sanitizer Bypass via Hostname Canonicalization
Newly collected advisory
CVE-2026-93630
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute Name
Zimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute Name
Newly collected advisory
CVE-2026-93636
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite Local Privilege Escalation via Unrestricted Postfix Sudo Permissions
Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted Postfix Sudo Permissions
Newly collected advisory
CVE-2026-50057
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Configuration
Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Configuration
Newly collected advisory
CVE-2026-93640
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injection
Zimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injection
Newly collected advisory
CVE-2026-50056
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite Missing Authorization in ConfigureZimlet Enables Delegated Administrator Privilege Escalation
Zimbra Collaboration Suite Missing Authorization in ConfigureZimlet Enables Delegated Administrator Privilege Escalation
Newly collected advisory
CVE-2026-93639
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZimbra Collaboration Suite OAuth Extension Cross-Site Request Forgery Enables Account Linking
Zimbra Collaboration Suite OAuth Extension Cross-Site Request Forgery Enables Account Linking
Newly collected advisory
CVE-2026-93631
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.