Oly Hossen

#11483of 57,577
26.4Total CVSS
Vulnerabilities · 4
Medium
2
High
2
PT-2026-106069
7.1
2026-10-05
Villatheme · Woocommerce Photo Reviews · CVE-2026-100515
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-reviews allows Reflected XSS.This issue affects Photo Reviews for WooCommerce: from n/a through 1.2.30.
PT-2026-103885
8.6
2026-10-01
Unknown · Acymailing Smtp Newsletter · CVE-2026-95588
**Name of the Vulnerable Software and Affected Versions** AcyMailing SMTP Newsletter versions prior to 11.0.6 **Description** An unauthenticated attacker can perform arbitrary file deletion on the system. **Recommendations** Update to a version newer than 11.0.5.
PT-2026-103257
5.3
2026-09-30
Radiustheme · Review Schema · CVE-2026-97282
Unauthenticated Insecure Direct Object References (IDOR) in Review Schema <= 3.1.0 versions.
PT-2026-103266
5.4
2026-09-30
WordPress · Razorpay Payment Links For Woocommerce · CVE-2026-97299
**Name of the Vulnerable Software and Affected Versions** Razorpay Payment Links for WooCommerce versions prior to 2.1.6 **Description** An unauthenticated Cross Site Request Forgery (CSRF) issue exists in the plugin. CSRF is a type of attack that tricks a victim into submitting a malicious request. It occurs when a web application performs an action without verifying that the user intended to perform that action. **Recommendations** Update Razorpay Payment Links for WooCommerce to version 2.1.6 or later.