Veille CVE

Semaine du 31 août au 6 septembre 2026

2 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Disable Users » ✕
  1. CVE-2026-75793 6.5 Moyenne

    Unknown SureCart

    The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating WordPress accounts, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled.

  2. CVE-2026-14326 3.8 Faible

    Unknown Timetics

    The Timetics WordPress plugin through 1.0.61 does not enforce per-object ownership when updating appointments through its REST API, allowing users with its custom staff role to modify, disable, or take over appointments belonging to other staff members.