72257 matches found
MINI-4RCP-C2RH-9H6J
Bulletin has no description...
CVE-2026-6801
creationtimestamp| type| source ---|---|--- 2026-07-11 07:35:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5nejffn2e 2026-07-11 08:02:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe76hgzi22x...
CVE-2025-5017
creationtimestamp| type| source ---|---|--- 2026-07-11 07:33:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5kan5sc2y 2026-07-11 07:39:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe5txto562t...
CVE-2026-9282
creationtimestamp| type| source ---|---|--- 2026-07-11 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116900169327845158 2026-07-11 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqe5efmorb2x 2026-07-11 07:36:29+00:00| seen|...
CVE-2026-7559
creationtimestamp| type| source ---|---|--- 2026-07-11 05:38:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdx3onwyn27...
CVE-2026-6801 Context Blog <= 1.3.5 - Unauthenticated Sensitive Information Exposure via 'postID' Parameter
The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the contextblogmodalpopup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts...
CVE-2026-6801
The Context Blog theme for WordPress is affected up to version 1.3.5. The vulnerability is an unauthenticated sensitive information exposure via the context_blog_modal_popup, which can let an attacker retrieve the content of password-protected posts. The root cause is exposure through a postID pa...
CVE-2026-15335
creationtimestamp| type| source ---|---|--- 2026-07-11 05:28:05+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqdwjlybsl2g 2026-07-11 05:28:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdwjlzgat2z 2026-07-11 11:00:43+00:00| seen|...
CVE-2026-3367
The Lockme OAuth2 calendars integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'App ID' setting in all versions up to, and including, 2.11.0. This is due to insufficient input sanitization and output escaping. The registersetting call on line 197 lacks a sanitiz...
CGA-4XQQ-XVRW-CQQ2
Bulletin has no description...
GHSA-XQP3-JQ6G-X3QM
creationtimestamp| type| source ---|---|--- 2026-07-11 03:42:32+00:00| seen| https://gist.github.com/alon710/3054e318d0e890a38da4e9f158827df1...
GHSA-99J7-FHR2-XFJ4
creationtimestamp| type| source ---|---|--- 2026-07-11 03:12:22+00:00| seen| https://gist.github.com/alon710/562c94e99a029c25882fbe479b6eb12d...
CVE-2026-55469
creationtimestamp| type| source ---|---|--- 2026-07-11 02:12:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdllfoczi2y...
GHSA-XRMC-C5CG-RV7X
creationtimestamp| type| source ---|---|--- 2026-07-11 01:41:49+00:00| seen| https://gist.github.com/alon710/fc9075308a51fb0dcac943a4365a02d7...
CVE-2026-52979
creationtimestamp| type| source ---|---|--- 2026-07-11 01:28:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdj4qollq2y...
MINI-2Q58-9FV3-8HV5
Bulletin has no description...
MINI-3W87-25JH-QH5C
Bulletin has no description...
MINI-59PQ-9QR3-XW2G
Bulletin has no description...