CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
WordPress Payment Forms for Paystack Plugin API Secret Key Disclosure Vulnerability (CVE-2026-110042)
[Affected Scope] Payment Forms for Paystack WordPress plugin versions before 4.0.6
[Impact] Users with Contributor role and above can view sensitive live and test Paystack API secret keys, granting full access to the site owner's payment account
[Mitigation] Immediately update the plugin to version 4.0.6 or higher and rotate all potentially exposed API secret keys
Cisco Catalyst SD-WAN Software Information Disclosure Vulnerability (CVE-2026-20133)
[Affected Scope] Network devices and virtual appliances running Cisco Catalyst SD-WAN Software
[Impact] Attackers can bypass file system restrictions via vshell access to read sensitive underlying operating system information
[Mitigation] Apply the official Cisco security patches immediately and restrict vshell/CLI access privileges
Fortinet FortiOS Sensitive Information Exposure and Symbolic Link Patch Bypass (CVE-2025-68686)
[Affected Scope] Fortinet FortiOS versions 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, and all versions of 7.2, 7.0, and 6.4
[Impact] A remote unauthenticated attacker with prior filesystem-level access can bypass existing symbolic link persistency mitigations via crafted HTTP requests to expose sensitive information
[Mitigation] Immediately upgrade to the patched firmware versions recommended in the official Fortinet advisory (FG-IR-25-934)