vulnerability-research 3 How Patchstack Is Devaluing Vulnerability Research Sep 16, 2026 CVE-2026-11855: Forged Stripe Webhook Metadata to Admin-Context XSS in Simple Membership Jun 15, 2026 CVE-2026-14224: Easy Appointments Subscriber+ IDOR Enables Cross-User Notification Redirection Jun 13, 2026