PULSEUnderground Intel

EN VIVO21señales / 24h

FEED

ransomqilin reclama a CORBY ROCK MILL · IE · Manufacturingransomqilin reclama a Delta Marine · FI · Transportationransomqilin reclama a J&D Financial · Financial Servicesransomendzone reclama a Philander Smith University · US · Educationransomsilentransomgroup reclama a A...n · Not Foundransomnetrunner reclama a M** A******* G********** O******* a** P***** S****** A********* · US · Not Foundransomqilin reclama a Global Security Concepts · US · Professional Servicesransombyod reclama a Standpointe / Trinite Solutions · Professional Servicesransomsafepay reclama a dd-automation.ch · CZ · Technologyransomsafepay reclama a stuecheli.ch · CH · Retail & E-Commerceransomsafepay reclama a bwi-bau.de · DE · Professional Servicesransomsafepay reclama a halservice.it · IT · Professional Servicesransomsafepay reclama a grundens.com · US · Retail & E-Commerceransomsafepay reclama a t-systems.com · DE · Technologyransomqilin reclama a CORBY ROCK MILL · IE · Manufacturingransomqilin reclama a Delta Marine · FI · Transportationransomqilin reclama a J&D Financial · Financial Servicesransomendzone reclama a Philander Smith University · US · Educationransomsilentransomgroup reclama a A...n · Not Foundransomnetrunner reclama a M** A******* G********** O******* a** P***** S****** A********* · US · Not Foundransomqilin reclama a Global Security Concepts · US · Professional Servicesransombyod reclama a Standpointe / Trinite Solutions · Professional Servicesransomsafepay reclama a dd-automation.ch · CZ · Technologyransomsafepay reclama a stuecheli.ch · CH · Retail & E-Commerceransomsafepay reclama a bwi-bau.de · DE · Professional Servicesransomsafepay reclama a halservice.it · IT · Professional Servicesransomsafepay reclama a grundens.com · US · Retail & E-Commerceransomsafepay reclama a t-systems.com · DE · Technology

← Todos los CVEs

CVE Watch6 oct 2026

CVE-2026-95594

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.0 versions.

CVSS

8.1

Alto

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 6 oct 2026 · Última mod.: 6 oct 2026 · CWE-266

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.0 versions.

Referencias oficiales

patchstack.comhttps://patchstack.com/database/wordpress/plugin/sms-alert/vulnerability/wordpress-sms-alert-order-notifications-plugin-4-0-0-privilege-escalation-vulnerability?_s_id=cve

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-481977.2 ALT

———Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.6h CVE-2026-397758.8 ALT

———Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.6h CVE-2026-397748.8 ALT

———Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.6h CVE-2026-3977310.0 CRÍ

———Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.6h CVE-2026-397657.2 ALT

———Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.6h CVE-2026-397619.8 CRÍ

———Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.6h