Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
More on Capability
Other advisories
- Not ratedCVE-2026-118181The Duplicate Post WordPress plugin before 1.5.8 does not perform a capability check when saving its global settings, relying only on its own role-access lis…
- Not ratedCVE-2026-105984The Email Marketing 4Dem WordPress plugin through 2.0.5 does not perform authorization or capability checks on several of its AJAX actions, allowing unauthen…
- Not ratedCVE-2026-117487The Flatsome WordPress theme before 3.20.13 does not perform a capability or nonce check on an AJAX action available to unauthenticated users, and does not r…
- Not ratedCVE-2026-105983The Email Marketing 4Dem WordPress plugin through 2.0.5 does not perform authorization or capability checks on several of its AJAX actions and REST routes, a…
- MediumCVE-2026-119302The NotificationX WordPress plugin before 3.3.7 does not perform any capability, authentication or nonce check on its notification preview path, allowing una…
- HighCVE-2026-121998The iChart WordPress plugin before 2.2.4 does not perform capability or ownership checks in several of its AJAX actions, relying only on a nonce that any lo…
- MediumCVE-2026-119303The NotificationX WordPress plugin before 3.3.7 does not perform any capability or nonce check on one of its REST routes, allowing unauthenticated users to …
- LowCVE-2026-117524The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not perform a status or capability check when resolving pos…
Other news entries
- Hiding Capabilities in AI ModelsNewsSchneier on Security
- Microsoft integrates SOC capabilities with Defender for enterprisesNewsCSO Online
- The cyber AI parity window now has a deadlineNewsCSO Online
- Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety ConstraintsNewsSecurityWeek
- Post-quantum cryptography adoption and the national security implicationsNewsCSO Online
- GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit RequestsNewsThe Hacker News
- OpenAI adds an AI safety layer to detect misuse without retaining enterprise dataNewsCSO Online
- AI threats are everywhere. A risk-first CISO decides what to prioritizeNewsCSO Online
Source: https://thehackernews.com/2026/06/chrome-ad-blocker-with-10m-installs.html
ID