CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Germanized for WooCommerce Private Data Exposure via Activation Token Reuse (CVE-2026-109231)
[Affected Scope] Germanized for WooCommerce WordPress plugin up to, and including, 4.1.4
[Impact] Authenticated attackers with Subscriber-level access can change their account email to a victim's billing email and reuse their original activation token to hijack past guest orders, exposing sensitive billing details.
[Mitigation] Update the plugin to the latest secure version (4.1.5 or higher), or explicitly set 'Disable login for unactivated customers' to Yes.
MikroTik RouterOS SSH Authentication Bypass and File Manipulation (CVE-2026-67279)
[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to specific security releases.
[Impact] Unauthenticated attackers can create, overwrite, or reconstruct files within the RouterOS namespace via SSH, leading to configuration theft or system compromise.
[Mitigation] Upgrade to versions 6.49.21, 7.23.4, 7.24.2 or later, and restrict SSH access.