Public archive
Research
04published disclosures
DisclosuresWordfence profile ↗
CVE-2026-18961VentraConnect Passwordless Login ≤ 1.4.3Unauthenticated authentication bypass via Spotify OAuth callbackCWE-287 · Civitasmass
8.1HighCVE-2026-17542Bit File Manager < 6.9.1Subscriber+ sensitive data disclosure via bitapps_fm_connectorCWE-200 · JING QIAN
6.5MediumCVE-2026-15014SMS Alert for WooCommerce ≤ 3.9.7Unauthenticated authentication bypass to account takeoverCWE-288 · Civitasmass
9.8CriticalCVE-2026-14503pCloud WP Backup ≤ 2.0.3Authorization failure exposing full-site backupsCWE-200 · Civitasmass
6.5MediumPlatform activity
Results