PULSE
FEED
ransomaurora reclama a Ernesto Malvestiti S.p.A. · IT · Manufacturingransomdragonforce reclama a Inside Passage Electric Cooperative, Inc · US · Energy & Utilitiesransomscarlettgroup reclama a mahsing.com.my · MY · Hospitalityransomwhitearmor reclama a LoveSac · US · Retail & E-Commerceransompayload reclama a Glückauf-Vermessung GmbH · DE · Professional Servicesransompayload reclama a Miletic GmbH · DEransompayload reclama a Edelstahl-Mechanik GmbH · DE · Manufacturingransomwhitearmor reclama a J.B Hunt · US · Transportationransompanzer reclama a Yodingenierie · BJ · Professional Servicesransomqilin reclama a White & Case · US · Professional Servicesransomqilin reclama a Hossner-Textil GmbH · DE · Manufacturingransomwhitearmor reclama a Partido Liberal · AR · Government & Defenseransomqilin reclama a Ooredoo Myanmar · MM · Technologyransomfalcon reclama a Weitz & Luxenberg · US · Professional Servicesransomaurora reclama a Ernesto Malvestiti S.p.A. · IT · Manufacturingransomdragonforce reclama a Inside Passage Electric Cooperative, Inc · US · Energy & Utilitiesransomscarlettgroup reclama a mahsing.com.my · MY · Hospitalityransomwhitearmor reclama a LoveSac · US · Retail & E-Commerceransompayload reclama a Glückauf-Vermessung GmbH · DE · Professional Servicesransompayload reclama a Miletic GmbH · DEransompayload reclama a Edelstahl-Mechanik GmbH · DE · Manufacturingransomwhitearmor reclama a J.B Hunt · US · Transportationransompanzer reclama a Yodingenierie · BJ · Professional Servicesransomqilin reclama a White & Case · US · Professional Servicesransomqilin reclama a Hossner-Textil GmbH · DE · Manufacturingransomwhitearmor reclama a Partido Liberal · AR · Government & Defenseransomqilin reclama a Ooredoo Myanmar · MM · Technologyransomfalcon reclama a Weitz & Luxenberg · US · Professional Services
← Todos los CVEs
CVE Watch25 oct 2026

CVE-2026-116052

A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipul

CVSS

4.3

Medio

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 25 oct 2026 · Última mod.: 25 oct 2026 · CWE-352 · CWE-862

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1159604.3 MED
—
——0Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.2h
CVE-2026-1159595.3 MED
—
——0Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.2h
CVE-2026-1159545.4 MED
—
——0Missing Authorization vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Geo Mashup: from n/a through 1.13.22.2h
CVE-2026-1155955.3 MED
—
——0Missing Authorization vulnerability in Supsystic Contact Form by Supsystic contact-form-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by Supsystic: from n/a through 1.10.7.2h
CVE-2026-972954.3 MED
—
——0Cross-Site Request Forgery (CSRF) vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Cross Site Request Forgery.This issue affects Media LIbrary Assistant: from n/a through 3.42.2h
CVE-2026-1159585.3 MED
—
——0Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0.2h