EUVD-2026-96531

Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme = 1.0.2 versions...

CVE-2026-81797 WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme = 1.0.2 versions...

CVE-2026-81797

The Buzz Stone | Magazine & Viral Blog WordPress Theme (versions

Friday Squid Blogging: I Caught a Squid

On Wednesday I spent a day fishing, on a small boat out of Gloucester, MA. We caught many cod none of which we could keep, and a bunch of hake and mackerel all of which we could keep. And…I caught a squid! Near as I can tell, it's a longfin squid, sometimes called a Boston squid Doryteuthis Ameri...

CVE-2024-9932-POC

CVE-2024-9932-POC Description: The Wux Blog Editor WordPress plugin is vulnerable to arbitrary file uploads due to insufficient file type validation in the wuxbtinsertImageNew function. Versions up to and including 3.0.0 are affected. This vulnerability allows unauthenticated attackers to upload...

CVE-2026-94661 WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through 2.4.10...

WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Theme Buzz Stone | Magazine & Viral Blog WordPress Theme versions = 1.0.2...

CVE-2026-40806

Unauthenticated Cross Site Scripting XSS in Blog, Posts and Category Filter for Elementor = 2.1.0 versions...

CVE-2026-40806 WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Blog, Posts and Category Filter for Elementor = 2.1.0 versions...

EUVD-2026-93043

Unauthenticated Cross Site Scripting XSS in Blog, Posts and Category Filter for Elementor = 2.1.0 versions...

CVE-2026-40806 WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Blog, Posts and Category Filter for Elementor = 2.1.0 versions...

CVE-2026-40806

The Blog, Posts and Category Filter for Elementor plugin for WordPress is vulnerable to an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions

CVE-2026-40806: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Blog, Posts and Category Filter for Elementor = 2.1.0 versions...

PT-2026-106465

Unauthenticated Cross Site Scripting XSS in Blog, Posts and Category Filter for Elementor = 2.1.0 versions...

WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by JunHee CHO in WordPress Plugin Blog, Posts and Category Filter for Elementor versions = 2.1.0...

When nothing worked, Artem Shymshyrian kept going

If you had asked Artem Shymshyrian years ago whether he would become a security researcher, the answer would have been far from certain...

Experience What It’s Like to Travel in the Occupied West Bank

Traverse barriers and checkpoints in the occupied West Bank—your choices reflect the reality of nearly 3.5 million Palestinians who live there...

Malicious Package

Overview epic-ue-blog is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-82382

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting against a visitor to a weblog using the bundled frontpage theme, by supplying a crafted blog-directory parameter that the...

EUVD-2026-88139

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting against a visitor to a weblog using the bundled frontpage theme, by supplying a crafted blog-directory parameter that the...