Advisory Database Sync

Author: advisory-database[bot]

advisories/unreviewed/2026/05/GHSA-76ww-43j5-78x5/GHSA-76ww-43j5-78x5.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-76ww-43j5-78x5",
-  "modified": "2026-06-30T03:36:53Z",
+  "modified": "2026-08-19T06:31:16Z",
   "published": "2026-05-29T12:31:25Z",
   "aliases": [
     "CVE-2026-42965"
@@ -19,6 +19,18 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42965"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2026:54583"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2026:54602"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2026:54770"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2026-42965"

advisories/unreviewed/2026/07/GHSA-f48p-mg4r-fhww/GHSA-f48p-mg4r-fhww.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f48p-mg4r-fhww",
-  "modified": "2026-08-14T03:31:24Z",
+  "modified": "2026-08-19T06:31:16Z",
   "published": "2026-07-09T12:30:28Z",
   "aliases": [
     "CVE-2026-59692"
@@ -55,6 +55,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2026:54752"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2026:56658"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2026-59692"

advisories/unreviewed/2026/07/GHSA-fvwj-j79q-57v7/GHSA-fvwj-j79q-57v7.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fvwj-j79q-57v7",
-  "modified": "2026-07-22T21:31:54Z",
+  "modified": "2026-08-19T06:31:16Z",
   "published": "2026-07-21T15:30:43Z",
   "aliases": [
     "CVE-2026-59846"
@@ -23,6 +23,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2026:42922"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2026:55855"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2026-59846"

advisories/unreviewed/2026/07/GHSA-g4ff-54hw-hj6r/GHSA-g4ff-54hw-hj6r.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-g4ff-54hw-hj6r",
-  "modified": "2026-08-14T03:31:24Z",
+  "modified": "2026-08-19T06:31:16Z",
   "published": "2026-07-09T12:30:28Z",
   "aliases": [
     "CVE-2026-59691"
@@ -55,6 +55,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2026:54752"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2026:56658"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2026-59691"

advisories/unreviewed/2026/07/GHSA-jp6g-7mqj-wj53/GHSA-jp6g-7mqj-wj53.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jp6g-7mqj-wj53",
-  "modified": "2026-07-22T21:31:54Z",
+  "modified": "2026-08-19T06:31:16Z",
   "published": "2026-07-21T15:30:44Z",
   "aliases": [
     "CVE-2026-59849"
@@ -23,6 +23,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2026:42922"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2026:55855"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2026-59849"

advisories/unreviewed/2026/07/GHSA-x94w-cg8g-g593/GHSA-x94w-cg8g-g593.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-x94w-cg8g-g593",
-  "modified": "2026-07-22T21:31:48Z",
+  "modified": "2026-08-19T06:31:16Z",
   "published": "2026-07-21T12:33:36Z",
   "aliases": [
     "CVE-2026-59842"
@@ -23,6 +23,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2026:42922"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2026:55855"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2026-59842"

advisories/unreviewed/2026/08/GHSA-28r4-82c9-hfh7/GHSA-28r4-82c9-hfh7.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-28r4-82c9-hfh7",
+  "modified": "2026-08-19T06:31:17Z",
+  "published": "2026-08-19T06:31:17Z",
+  "aliases": [
+    "CVE-2026-14826"
+  ],
+  "details": "The Quiz and Survey Master (QSM)  WordPress plugin before 11.2.4 does not perform a per-object ownership check on the REST routes that return a quiz's email-notification and results-page configuration, allowing users with contributor-level access and above to read the configuration, including notification recipient addresses, of quizzes created by other users.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14826"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/bb9cac20-4df5-4834-89f0-746a5eab20ea"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-08-19T06:17:33Z"
+  }
+}

advisories/unreviewed/2026/08/GHSA-2x6x-6h49-pf6q/GHSA-2x6x-6h49-pf6q.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2x6x-6h49-pf6q",
+  "modified": "2026-08-19T06:31:18Z",
+  "published": "2026-08-19T06:31:18Z",
+  "aliases": [
+    "CVE-2026-19406"
+  ],
+  "details": "The Easy Appointments WordPress plugin before 4.0.1 does not restrict one of its appointment-listing REST endpoints to the records belonging to the requesting user, allowing users with contributor-level access to read all bookings on the site, including customer names, schedules, and statuses.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19406"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/53cfb207-8f26-438c-a928-bc9271f312f0"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-08-19T06:17:39Z"
+  }
+}

advisories/unreviewed/2026/08/GHSA-34m6-mf7c-4crh/GHSA-34m6-mf7c-4crh.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-34m6-mf7c-4crh",
+  "modified": "2026-08-19T06:31:18Z",
+  "published": "2026-08-19T06:31:18Z",
+  "aliases": [
+    "CVE-2026-19417"
+  ],
+  "details": "The KiviCare  WordPress plugin before 4.5.4 does not verify that the requesting user is entitled to the media file being served, allowing authenticated patient-level users to download any file in the media library, including other patients' uploaded medical reports.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19417"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/4270b160-cbb8-46b2-853c-927651ca16bf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-08-19T06:17:40Z"
+  }
+}

advisories/unreviewed/2026/08/GHSA-36w4-4687-hhqj/GHSA-36w4-4687-hhqj.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-36w4-4687-hhqj",
+  "modified": "2026-08-19T06:31:17Z",
+  "published": "2026-08-19T06:31:17Z",
+  "aliases": [
+    "CVE-2026-16617"
+  ],
+  "details": "The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users (when front-end file management is enabled) to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the list.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16617"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/fc51a940-8e67-45d0-b47d-b16da288ebb3"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-08-19T06:17:35Z"
+  }
+}