CVE-2026-83000 to CVE-2026-83999

6 CVEs with public proof-of-concept exploits.

• CVE-2026-835241 PoCRedPort Optimizer wXa-223 System Clock datetime.php exec command injection
• CVE-2026-835331 PoCWP Express Checkout < 2.4.9 - Unauthenticated Payment Bypass via wpec_process_payment
• CVE-2026-835471 PoCXpro Elementor Addons 1.6.0 - 1.7.3 - Contributor+ Stored XSS via Multiple Widgets
• CVE-2026-836101 PoCxmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
• CVE-2026-837441 PoCinvoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgery
• CVE-2026-837721 PoCCobham SATCOM VSAT7090 Maritime Satellite Router JSON Parsing mail-report.sh c_set_reports_decode command injection