CVE-2026-51785

creationtimestamp| type| source ---|---|--- 2026-08-03 18:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms766fxfxh2m...

CVE-2026-12965

creationtimestamp| type| source ---|---|--- 2026-08-03 17:54:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms72wozp2t2o...

CVE-2025-69946

creationtimestamp| type| source ---|---|--- 2026-08-03 17:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms72pkjtn22z...

CVE-2026-69152

creationtimestamp| type| source ---|---|--- 2026-08-03 17:31:36+00:00| seen| https://gist.github.com/alon710/d80e5d80b7549449b84a63552411d4ec 2026-08-03 18:26:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hlxnpa6jl7kfg 2026-08-04 12:00:52+00:00| seen|...

CVE-2026-69149

creationtimestamp| type| source ---|---|--- 2026-08-03 16:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6xhtypny2p 2026-08-03 18:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5nwaq22vg5q3w 2026-08-05 02:26:04+00:00| seen|...

GHSA-JHPW-976M-542J

creationtimestamp| type| source ---|---|--- 2026-08-03 16:32:48+00:00| seen| https://gist.github.com/alon710/73fc02db3c552514344a681ca47f8151...

CVE-2026-68584

creationtimestamp| type| source ---|---|--- 2026-08-03 14:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6qyg64yp2u 2026-09-03 22:31:26+00:00| seen| https://gist.github.com/alon710/4d2d0e14cc9fbf8c2c4ec8fd41b0edff 2026-09-08 20:35:24+00:00| published-proof-of-concept|...

CVE-2025-15675

creationtimestamp| type| source ---|---|--- 2026-08-03 14:22:13+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3ms6p3utr552u...

CVE-2026-69088

Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls Class::method in blueprint dynamic-field directives because Blueprint::isSafeDynamicCall only applies its dangerous-callable denylist to strings that do not contain '::'. An account with only page-editing...

CVE-2026-69088

Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls Class::method in blueprint dynamic-field directives because Blueprint::isSafeDynamicCall only applies its dangerous-callable denylist to strings that do not contain '::'. An account with only page-editing...

EUVD-2026-52281

Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls Class::method in blueprint dynamic-field directives because Blueprint::isSafeDynamicCall only applies its dangerous-callable denylist to strings that do not contain '::'. An account with only page-editing...

CVE-2026-69088 Grav CMS 2.0.7 through 2.0.10 Arbitrary Method Invocation via Blueprint

Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls Class::method in blueprint dynamic-field directives because Blueprint::isSafeDynamicCall only applies its dangerous-callable denylist to strings that do not contain '::'. An account with only page-editing...

CVE-2026-8793

creationtimestamp| type| source ---|---|--- 2026-08-03 12:50:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ms6jxjcufv2l 2026-08-17 18:00:07+00:00| seen| Telegram/TuDwnrWh4mpGIaa9e8OcRyABnADuhXoMh9pqZJowOjcczY 2026-08-18 00:00:08+00:00| published-proof-of-concept|...

CVE-2026-16534

The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress's role-assignment and per-user edit permissions during CSV import, allowing a user holding only the user-creation capability to create an administrator account and to overwrite an existing...

CVE-2026-15930

The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration before using the returned value as a user ID to update an account, allowing unauthenticated attackers to overwrite the primary administrator's account data including the email...

EUVD-2026-52175

The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration before using the returned value as a user ID to update an account, allowing unauthenticated attackers to overwrite the primary administrator's account data including the email...

EUVD-2026-52166

The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress's role-assignment and per-user edit permissions during CSV import, allowing a user holding only the user-creation capability to create an administrator account and to overwrite an existing...

CVE-2026-6789

creationtimestamp| type| source ---|---|--- 2026-08-03 05:00:03+00:00| seen| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34 2026-08-04 00:00:48+00:00| published-proof-of-concept| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34...

CVE-2026-7878

creationtimestamp| type| source ---|---|--- 2026-08-03 05:00:03+00:00| seen| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34 2026-08-04 00:00:48+00:00| published-proof-of-concept| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34...

CVE-2025-71401

creationtimestamp| type| source ---|---|--- 2026-08-03 04:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms5os36ck22s 2026-08-04 11:24:49+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3msavnlqgs323...