28119 matches found
CVE-2026-8383
The LearnPress WordPress plugin before 4.3.7 does not gate the edit context on one of its REST endpoint behind the editusers capability, allowing unauthenticated visitors to retrieve each returned user's roles, full capabilities map, extra capabilities, locale, and registration date via a crafted...
CVE-2026-46871
creationtimestamp| type| source ---|---|--- 2026-06-17 11:55:34+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moiayeen2k2g...
CVE-2026-46977
creationtimestamp| type| source ---|---|--- 2026-06-17 11:55:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moiaxrr3n52v...
CVE-2026-10094
creationtimestamp| type| source ---|---|--- 2026-06-17 09:50:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohzymnnry2n...
CVE-2026-0071
creationtimestamp| type| source ---|---|--- 2026-06-17 09:45:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohzpnnet62z 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen|...
CVE-2026-0064
creationtimestamp| type| source ---|---|--- 2026-06-17 09:40:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohzgogkdh2j 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen|...
CVE-2026-0082
creationtimestamp| type| source ---|---|--- 2026-06-17 09:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohydjy5ah2v 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622...
CVE-2026-8383 LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API
The LearnPress WordPress plugin before 4.3.7 does not gate the edit context on one of its REST endpoint behind the editusers capability, allowing unauthenticated visitors to retrieve each returned user's roles, full capabilities map, extra capabilities, locale, and registration date via a crafted...
CVE-2026-8383
The LearnPress WordPress plugin (versions prior to 4.3.7 ) is vulnerable to an information disclosure flaw due to a missing capability check on a REST endpoint. The edit context is not properly restricted by the edit_users capability, allowing unauthenticated visitors to retrieve sensitive data, ...
CVE-2026-8383 LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API
The LearnPress WordPress plugin before 4.3.7 does not gate the edit context on one of its REST endpoint behind the editusers capability, allowing unauthenticated visitors to retrieve each returned user's roles, full capabilities map, extra capabilities, locale, and registration date via a crafted...
CVE-2026-35293
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-18 06:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mok7nu2x3q2i...
CVE-2026-46958
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8...
CVE-2026-35268
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-18 00:37:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mojlk4nsfv2z...
CVE-2026-35314
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8...
CVE-2026-46898
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-07-23 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrcu3scu5m23...
CVE-2026-46939
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-07-23 11:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrcp2ugljq2u...
CVE-2026-46899
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-18 08:09:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mokeosfpit2t...
CVE-2026-46933
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-19 00:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mom3z2t6yp2t...
CVE-2026-35304
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-18 06:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mok5y7vgti2f...
CVE-2026-46767
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-19 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3momg2v65p724...