CVE-2026-74895

creationtimestamp| type| source ---|---|--- 2026-08-17 12:10:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtboauu7st2b 2026-08-17 12:48:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5wvod3x3ygyvu 2026-08-17 19:10:04+00:00| seen|...

CVE-2025-10005

creationtimestamp| type| source ---|---|--- 2026-08-17 08:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mtbb65npy42s...

CVE-2026-72064

creationtimestamp| type| source ---|---|--- 2026-08-17 07:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtb5hyxkfp24...

The vulnerability in the driver/gpio/gpio-omap.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the drivers/gpio/gpio-omap.c component in the Linux operating system’s kernel is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver/pci/endpoint/pci-ep-cfs.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/pci/endpoint/pci-ep-cfs.c component of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the octeontx2-af module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the octeontx2-af module in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability in the driver/iommu/intel/pasid.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/iommu/intel/pasid.c component of the Linux operating system’s kernel is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fs/minix/inode.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/minix/inode.c component in the Linux operating system is related to insufficient checking of the type of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the drivers/pci/iov.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the drivers/pci/iov.c component in the Linux operating system’s kernel is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-74791

creationtimestamp| type| source ---|---|--- 2026-08-16 14:46:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/djmvulg5yvrlu 2026-08-16 14:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt7gpnfucb23 2026-08-16 15:00:47+00:00| seen|...

CVE-2026-2357 Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'btbbshortcode' shortcode in all versions up to, and including, 5.6.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2026-2357

The CVE concerns the Bold Page Builder WordPress plugin. A Stored Cross-Site Scripting vulnerability exists in the bt_bb_shortcode attribute handling for all versions up to 5.6.8, caused by insufficient input sanitization and output escaping. Exploitation requires authenticated access at contribu...

CVE-2026-18402

The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute in all versions up to, and including, 1.10.3 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-15790

The Youtube Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.0.4 via the 'emdmbmeta' shortcode. This is due to insufficient input sanitization and output escaping on attachment titles referenced by the shortcode's image field:...

EUVD-2026-59914

The Premium Packages WordPress plugin before 7.0.7 does not validate a withdrawal request against the requesting user's actual earned balance, allowing any authenticated user, including a subscriber with no sales at all, to submit a payout request for an arbitrary amount, which an administrator m...

EUVD-2026-59904

The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'order0dir' Parameter in all versions up to, and including, 5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2026-16775

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'id' Shortcode Attribute in all versions up to, and including, 4.9.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-16775

The affected software is the Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin. Affected versions: all versions up to and including 4.9.0. Vulnerability type: Stored Cross-Site Scripting via the 'id' Shortcode Attribute, caused by insufficient input sanitization and output...

CVE-2026-16758

The Snippet Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 5.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level acce...

CVE-2026-18402 SureDash <= 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute

The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute in all versions up to, and including, 1.10.3 due to insufficient input sanitization and output escaping. This makes it...