261604 matches found
CVE-2026-58180
creationtimestamp| type| source ---|---|--- 2026-08-01 07:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mryvtymowm24...
EUVD-2026-51712
The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts client-controlled forwarding headers when enforcing its per-IP vote restriction, allowing unauthenticated attackers to bypass the vote limit and cast unlimited votes on a public poll...
EUVD-2026-51711
The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...
CVE-2026-14214
The CVE concerns the Booking for Appointments and Events Calendar WordPress plugin (pre-2.4.4). The root cause is that the customer import does not restrict which fields can be written, allowing an Amelia Manager to arbitrarily modify columns in stored user records via the import request. This yi...
CVE-2026-14561 Authora - Easy Login with Mobile Number < 1.7.7 - Unauthenticated Account Takeover via OTP Disclosure
The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered...
EUVD-2026-51705
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.4 does not restrict which fields can be written through its customer import, allowing a user with the Amelia Manager role to modify arbitrary columns of any stored user record by supplying them in the import request...
EUVD-2026-51708
The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered...
CVE-2026-10827
The CVE-2026-10827 entry concerns Spectra Legacy (WordPress) plugin prior to 2.20.0. The vulnerability is a CSS-injection flaw: the plugin fails to validate/escape several block-style attributes used to build front-end CSS. With Contributor+ privileges, an attacker can inject arbitrary CSS that i...
WordPress Fluent Support plugin < 2.3.1 - Agent+ Arbitrary Ticket Customer Reassignment vulnerability
Agent+ Arbitrary Ticket Customer Reassignment vulnerability discovered by Mustafa Ahmed in WordPress Plugin Fluent Support versions 2.3.1...
CVE-2026-58389 affecting package thrift for versions less than 0.24.0-1
CVE-2026-58389 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56850 affecting package nodejs for versions less than 24.18.1-1
CVE-2026-56850 affecting package nodejs for versions less than 24.18.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-55971 affecting package thrift for versions less than 0.24.0-1
CVE-2026-55971 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56847 affecting package nodejs for versions less than 24.18.1-1
CVE-2026-56847 affecting package nodejs for versions less than 24.18.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-7260 affecting package php for versions less than 8.3.33-1
CVE-2026-7260 affecting package php for versions less than 8.3.33-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1
CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-55968 affecting package thrift for versions less than 0.24.0-1
CVE-2026-55968 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-48586 affecting package thrift for versions less than 0.24.0-1
CVE-2026-48586 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1
CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...