CVE-2026-6056

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-68001

creationtimestamp| type| source ---|---|--- 2026-04-18 23:00:13+00:00| published-proof-of-concept| Telegram/J1TSaArQ0ScFY239N-pEajUhnEKmxSQcewj6uEimw6KDWT0 2026-04-19 03:00:05+00:00| published-proof-of-concept| Telegram/fUN7x3zhWJI41Y9qvAix9-DSuCPZFxW-u6Jn34L6Wbqg7U...

MINI-PV9P-RX7H-8R2V

Bulletin has no description...

GHSA-C3FC-8QFF-9HWX vulnerabilities

Vulnerabilities for packages: guacamole-client, ruby3.3-bouncy-castle-java, jenkins, keycloak, elasticsearch, ruby3.2-bouncy-castle-java, thingsboard, apache-nifi, jruby, gradle, camunda, logstash-fips, hono, kayenta, druid, kserve-modelmesh, spark, commercial-elasticsearch,...

MINI-Q59F-Q4R7-9PPR

Bulletin has no description...

MINI-CPQC-R54C-79CQ

Bulletin has no description...

MINI-WV83-4XW9-2R56

Bulletin has no description...

MINI-6JRG-GJMX-V245

Bulletin has no description...

MINI-43Q2-657P-MH45

Bulletin has no description...

MINI-JXQC-HQWP-834R

Bulletin has no description...

MINI-MX7C-GQRW-WFG4

Bulletin has no description...

MINI-FX74-VVFC-J6Q3

Bulletin has no description...

GHSA-8M29-FPQ5-89JJ

creationtimestamp| type| source ---|---|--- 2026-04-18 03:45:47+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjqjn7dvefi2...

CVE-2026-1838

The Hostel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcodeid' parameter in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-1559

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkinplaceid' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access...

CVE-2026-1559 Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkinplaceid' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access...

CVE-2026-1559

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkinplaceid' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access...

EUVD-2026-23622

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkinplaceid' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access...

CVE-2026-1838

The Hostel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcodeid' parameter in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-1838 Hostel <= 1.1.6 - Reflected Cross-Site Scripting via 'shortcode_id' Parameter

The Hostel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcodeid' parameter in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...