Channel Public Channel

RedPacket Security

@redpacketsecurity

Status Page: https://stats.uptimerobot.com/NOPPkcZEk2

Open in Telegram

Subscribers: 3.11K
Photos: 286
Videos: 0
Links: 123K

Showing posts older than #123357 · Back to latest

Older Posts 20 shown

Post #123356 17 Oct 3, 2026, 14:42 UTC

CVE Alert: CVE-2026-101928 - magicplugins - Magic Tooltips For Contact Form 7 - https://www.redpacketsecurity.com/cve-alert-cve-2026-101928-magicplugins-magic-tooltips-for-contact-form-7/

RedPacket Security CVE Alert: CVE-2026-101928 - magicplugins - Magic Tooltips For Contact Form 7 - RedPacket Security The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' parameter in all versions up to, and

Post #123355 13 Oct 3, 2026, 14:42 UTC

CVE Alert: CVE-2026-87091 - uscnanbu - Welcart e-Commerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-87091-uscnanbu-welcart-e-commerce/

RedPacket Security CVE Alert: CVE-2026-87091 - uscnanbu - Welcart e-Commerce - RedPacket Security The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versions up to, and

Post #123354 23 Oct 3, 2026, 14:42 UTC

CVE Alert: CVE-2026-103913 - paoltaia - GeoDirectory – WP Business Directory Plugin and Classified Listings Directory - https://www.redpacketsecurity.com/cve-alert-cve-2026-103913-paoltaia-geodirectory-wp-business-directory-plugin-and-classified-listings-directory/

RedPacket Security CVE Alert: CVE-2026-103913 - paoltaia - GeoDirectory – WP Business Directory Plugin and Classified Listings Directory - RedPacket… The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude/longitude coordinates of a listing in versions up to, and

Post #123353 19 Oct 3, 2026, 14:42 UTC

CVE Alert: CVE-2026-97644 - trainingbusinesspros - Groundhogg — CRM, Newsletters, and Marketing Automation - https://www.redpacketsecurity.com/cve-alert-cve-2026-97644-trainingbusinesspros-groundhogg-crm-newsletters-and-marketing-automation/

RedPacket Security CVE Alert: CVE-2026-97644 - trainingbusinesspros - Groundhogg — CRM, Newsletters, and Marketing Automation - RedPacket Security The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation via Contact Identity Rebinding in all

Post #123352 21 Oct 3, 2026, 13:15 UTC

[WALLSTREET] - Ransomware Victim: St[.] Francis Healthcare Systems of Hawaii - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-st-francis-healthcare-systems-of-hawaii/

RedPacket Security [WALLSTREET] - Ransomware Victim: St[.] Francis Healthcare Systems of Hawaii - RedPacket Security NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating

Post #123351 17 Oct 3, 2026, 13:15 UTC

[WALLSTREET] - Ransomware Victim: World Cup 2034 - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-world-cup-2034/

RedPacket Security [WALLSTREET] - Ransomware Victim: World Cup 2034 - RedPacket Security NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating

Post #123350 24 Oct 3, 2026, 09:46 UTC

CVE Alert: CVE-2026-92536 - properfraction - Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress - https://www.redpacketsecurity.com/cve-alert-cve-2026-92536-properfraction-paid-membership-plugin-ecommerce-user-registration-form-login-form-user-profile-restrict-content-profilepress/

RedPacket Security CVE Alert: CVE-2026-92536 - properfraction - Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile… The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is

Post #123349 23 Oct 3, 2026, 09:46 UTC

CVE Alert: CVE-2026-92977 - devowl - Real Cookie Banner: GDPR & ePrivacy Cookie Consent - https://www.redpacketsecurity.com/cve-alert-cve-2026-92977-devowl-real-cookie-banner-gdpr-eprivacy-cookie-consent/

RedPacket Security CVE Alert: CVE-2026-92977 - devowl - Real Cookie Banner: GDPR & ePrivacy Cookie Consent - RedPacket Security The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up

Post #123348 19 Oct 3, 2026, 09:46 UTC

CVE Alert: CVE-2026-93428 - ultimatemember - Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin - https://www.redpacketsecurity.com/cve-alert-cve-2026-93428-ultimatemember-ultimate-member-user-profile-registration-login-member-directory-content-restriction-membership-plugin/

RedPacket Security CVE Alert: CVE-2026-93428 - ultimatemember - Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction… The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to

Post #123347 10 Oct 3, 2026, 09:46 UTC

CVE Alert: CVE-2026-96270 - ultimatemember - Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin - https://www.redpacketsecurity.com/cve-alert-cve-2026-96270-ultimatemember-ultimate-member-user-profile-registration-login-member-directory-content-restriction-membership-plugin/

RedPacket Security CVE Alert: CVE-2026-96270 - ultimatemember - Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction… The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to

Post #123346 7 Oct 3, 2026, 09:45 UTC

CVE Alert: CVE-2026-104433 - kvcache-ai - Mooncake - https://www.redpacketsecurity.com/cve-alert-cve-2026-104433-kvcache-ai-mooncake/

RedPacket Security CVE Alert: CVE-2026-104433 - kvcache-ai - Mooncake - RedPacket Security Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that allows unauthenticated

Post #123345 7 Oct 3, 2026, 09:45 UTC

CVE Alert: CVE-2026-82044 - UTMStack - UTMStack - https://www.redpacketsecurity.com/cve-alert-cve-2026-82044-utmstack-utmstack/

RedPacket Security CVE Alert: CVE-2026-82044 - UTMStack - UTMStack - RedPacket Security UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal

Post #123344 7 Oct 3, 2026, 09:45 UTC

CVE Alert: CVE-2026-104991 - Alanaktion - phproject - https://www.redpacketsecurity.com/cve-alert-cve-2026-104991-alanaktion-phproject/

RedPacket Security CVE Alert: CVE-2026-104991 - Alanaktion - phproject - RedPacket Security Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST API issue endpoints (single_get, single_comments,

Post #123343 9 Oct 3, 2026, 09:45 UTC

CVE Alert: CVE-2026-82039 - UTMStack - UTMStack - https://www.redpacketsecurity.com/cve-alert-cve-2026-82039-utmstack-utmstack/

RedPacket Security CVE Alert: CVE-2026-82039 - UTMStack - UTMStack - RedPacket Security UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows authenticated attackers to inject

Post #123342 5 Oct 3, 2026, 09:45 UTC

CVE Alert: CVE-2026-104478 - getformwork - formwork - https://www.redpacketsecurity.com/cve-alert-cve-2026-104478-getformwork-formwork/

RedPacket Security CVE Alert: CVE-2026-104478 - getformwork - formwork - RedPacket Security Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files.

Post #123341 8 Oct 3, 2026, 09:44 UTC

CVE Alert: CVE-2026-93875 - Crocoblock - JetAppointment - https://www.redpacketsecurity.com/cve-alert-cve-2026-93875-crocoblock-jetappointment/

RedPacket Security CVE Alert: CVE-2026-93875 - Crocoblock - JetAppointment - RedPacket Security The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in all versions up to, and including,

Post #123340 6 Oct 3, 2026, 09:44 UTC

CVE Alert: CVE-2026-104988 - Red Hat - Red Hat Certificate System 10 - https://www.redpacketsecurity.com/cve-alert-cve-2026-104988-red-hat-red-hat-certificate-system-10/

RedPacket Security CVE Alert: CVE-2026-104988 - Red Hat - Red Hat Certificate System 10 - RedPacket Security A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via

Post #123339 11 Oct 3, 2026, 09:44 UTC

CVE Alert: CVE-2026-104637 - onetwothreeneth - HospitalManagementSystem - https://www.redpacketsecurity.com/cve-alert-cve-2026-104637-onetwothreeneth-hospitalmanagementsystem/

RedPacket Security CVE Alert: CVE-2026-104637 - onetwothreeneth - HospitalManagementSystem - RedPacket Security A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the

Post #123338 13 Oct 3, 2026, 09:44 UTC

CVE Alert: CVE-2026-85215 - GG Soft Software Services Inc. - Paperwork - https://www.redpacketsecurity.com/cve-alert-cve-2026-85215-gg-soft-software-services-inc-paperwork/

RedPacket Security CVE Alert: CVE-2026-85215 - GG Soft Software Services Inc. - Paperwork - RedPacket Security Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL

Post #123337 14 Oct 3, 2026, 09:44 UTC

CVE Alert: CVE-2014-125130 - Damjan - CodeArt Google MP3 Audio Player - https://www.redpacketsecurity.com/cve-alert-cve-2014-125130-damjan-codeart-google-mp3-audio-player/

RedPacket Security CVE Alert: CVE-2014-125130 - Damjan - CodeArt Google MP3 Audio Player - RedPacket Security CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability

Older posts →