CVE-2026-10764

Publié : 30 septembre 2026

Modifié : 30 septembre 2026

Score CVSS

8.7

HIGH

Description détaillée

Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data.

Vecteur brut :CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions.

Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.

Unauthenticated Cross Site Request Forgery (CSRF) in Razorpay Payment Links for WooCommerce <= 2.1.5 versions.