EUVD-2026-46269

Ninja Forms plugin version 3.14.8 and prior for WordPress Multisite contains an incorrect authorization vulnerability that allows a subsite Administrator to trigger network-wide deletion of all Ninja Forms data by exploiting a site-scoped capability check combined with unsafe multisite migration...

CVE-2026-45138

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the custom htmlpurify validation rule used to sanitize blog post bodies relies on by-reference mutation ?string &$str, but CodeIgniter 4's validator passes a local copy of the value, so the sanitized tex...

CVE-2026-45138 CI4MS: Stored XSS in Blog Content via Broken `html_purify` Validation Rule

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the custom htmlpurify validation rule used to sanitize blog post bodies relies on by-reference mutation ?string &$str, but CodeIgniter 4's validator passes a local copy of the value, so the sanitized tex...

CVE-2026-45138

CVE-2026-45138 affects CI4MS (CodeIgniter 4-based CMS skeleton). Before 0.31.9.0, html_purify sanitization mutates the value by reference, but CodeIgniter’s validator uses a copy, causing sanitized text to be discarded. The Blog controller writes raw content to blog_langs and the public post temp...

CVE-2026-45138 CI4MS: Stored XSS in Blog Content via Broken `html_purify` Validation Rule

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the custom htmlpurify validation rule used to sanitize blog post bodies relies on by-reference mutation ?string &$str, but CodeIgniter 4's validator passes a local copy of the value, so the sanitized tex...

CVE-2026-48345

creationtimestamp| type| source ---|---|--- 2026-07-19 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqyywodrtt26...

CVE-2026-16213

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

CVE-2026-16213

Summary of vulnerability (CVE-2026-16213) : In Fantomas42 django-blog-zinnia (up to 0.20), a flaw affects an unknown function in the file zinnia/views/mixins/entry_protection.py (Protected Entry Password Handler). The manipulation leads to the cleartext storage of sensitive information . Exploita...

CVE-2026-16213 Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

CVE-2026-16213

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

EUVD-2026-45424

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

CVE-2026-16213 Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

PT-2026-61047

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entry protection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

CVE-2026-45732

creationtimestamp| type| source ---|---|--- 2026-07-18 19:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqwxkkkjjx22...

CVE-2020-35777

creationtimestamp| type| source ---|---|--- 2026-07-17 20:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqum4lftbj22...

CVE-2021-20134

creationtimestamp| type| source ---|---|--- 2026-07-17 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mquirc3foz23...

CVE-2018-5852

creationtimestamp| type| source ---|---|--- 2026-07-15 21:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqpojzbm2r22...

CVE-2017-18307

creationtimestamp| type| source ---|---|--- 2026-07-15 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqpl6qlrol2f...

CVE-2017-18306

creationtimestamp| type| source ---|---|--- 2026-07-15 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqpjj457ba2f...

CVE-2026-57973

creationtimestamp| type| source ---|---|--- 2026-07-14 22:04:52+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:04:18+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-16 12:52:15+00:00| seen|...