CVE-2026-43826

creationtimestamp| type| source ---|---|--- 2026-05-10 20:21:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mljljjypls2s 2026-05-11 10:57:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mll4hefmlq2r...

EUVD-2021-34811

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

CVE-2022-50949

creationtimestamp| type| source ---|---|--- 2026-05-10 15:19:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj2ooxzbk2h...

CVE-2022-50954

creationtimestamp| type| source ---|---|--- 2026-05-10 14:48:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliywj5zzg2i...

CVE-2022-50957

creationtimestamp| type| source ---|---|--- 2026-05-10 14:45:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliyqyf3sj2k...

CVE-2021-47951

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

CVE-2026-45371

creationtimestamp| type| source ---|---|--- 2026-05-10 12:05:37+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gmmv-4cc5-wr9r...

CVE-2026-8243

creationtimestamp| type| source ---|---|--- 2026-05-10 10:45:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlildj7d7c2q...

CVE-2026-8226

creationtimestamp| type| source ---|---|--- 2026-05-10 08:07:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlicjk73nx2e...

Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles

...

CVE-2026-8228

creationtimestamp| type| source ---|---|--- 2026-05-10 08:02:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlicalqyfi2i...

CVE-2026-8229

creationtimestamp| type| source ---|---|--- 2026-05-10 07:47:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlibf7mw772v...

CVE-2026-8227

creationtimestamp| type| source ---|---|--- 2026-05-10 07:37:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliatcnc232o...

CVE-2026-8232

creationtimestamp| type| source ---|---|--- 2026-05-10 07:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mli7sxhsdd2v...

CVE-2026-8217

creationtimestamp| type| source ---|---|--- 2026-05-10 04:30:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhwgbfuff2h...

CVE-2022-50963

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50963 2026-05-10 14:46:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliytoj2kk2c...

CVE-2022-50966

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50966 2026-05-10 15:44:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj43gyge42q...

CVE-2022-50969

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50969 2026-05-10 15:08:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj22difaf2h...

CVE-2026-6735

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...

CVE-2026-6735

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...