📋 ADVISORIES
📄 Source for New extortion group n0n threatens to destroy backups, claims a dozen victims in days — cyberxtron.com
📄 Source for Beaver Builder WordPress plugin vulnerable to unauthenticated arbitrary shortcode execution (CVE-2026-92084, CVSS 9.1) — wordfence.com
📄 Source for WordPress Photo Gallery by 10Web plugin (CVE-2026-92974) vulnerable to reflected XSS via thumb_url parameter — wordfence.com
📄 Source for Responsive Plus WordPress plugin <= 3.5.3 vulnerable to stored XSS via shortcode attributes (CVE-2026-15795) — wordfence.com
🔓 CVEs & KEV
CVE-2026-87115 — e4jvikwp VikAppointments Services Booking Calendar — CVSS 9.1 — VikAppointments Services Booking Calendar through 1.2.21 - Unauthenticated Arbitra...
CVE-2026-18443 — storeapps Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet) — CVSS 8.8 — Smart Manager through 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privil...
CVE-2026-85515 — Legion of the Bouncy Castle Inc. BC-JAVA — CVSS 8.2 — OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity chec...
CVE-2026-96267 — osamaesh WP Visitor Statistics (Real Time Traffic) — CVSS 7.5 — WP Visitor Statistics (Real Time Traffic) through 8.7 - Unauthenticated SQL Inject...