CVE-2026-60656

creationtimestamp| type| source ---|---|--- 2026-07-22 17:03:52+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrasjur3vv2z 2026-07-22 17:03:53+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116964709622529749 2026-07-23 17:22:52+00:00| seen|...

CVE-2026-60642

creationtimestamp| type| source ---|---|--- 2026-07-22 14:10:29+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mraittycpx2t 2026-07-22 14:10:30+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116964027874383696 2026-07-23 17:22:18+00:00| seen|...

CVE-2026-60799

creationtimestamp| type| source ---|---|--- 2026-07-22 11:14:28+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mra6z3whu22o 2026-07-22 11:14:30+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116963335733043048 2026-07-23 17:47:18+00:00| seen|...

CVE-2026-63107

creationtimestamp| type| source ---|---|--- 2026-07-20 23:09:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr4g2l2kq52l 2026-07-20 23:09:55+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116954824349658240...

CVE-2026-63429

creationtimestamp| type| source ---|---|--- 2026-07-20 17:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rg45qoq2j 2026-07-20 17:11:49+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116953416257282503 2026-07-20 17:11:49+00:00| seen|...

CVE-2026-12080

creationtimestamp| type| source ---|---|--- 2026-07-20 14:06:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr3ho2q2t42o 2026-07-20 14:06:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116952685778778549 2026-07-20 16:05:56+00:00| seen|...

CVE-2026-9734

creationtimestamp| type| source ---|---|--- 2026-07-18 06:51:27+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116939652207836159 2026-07-18 07:44:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqvrgqocrf2q...

CVE-2026-15395

creationtimestamp| type| source ---|---|--- 2026-07-17 12:12:29+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqtpwagzup2v 2026-07-17 12:12:46+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116935253395484489...

CVE-2026-48370

creationtimestamp| type| source ---|---|--- 2026-07-15 05:08:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqnxbgcyov2a 2026-07-15 05:08:50+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116922259945417226 2026-07-27 03:26:49+00:00| seen|...

CVE-2026-24233

creationtimestamp| type| source ---|---|--- 2026-07-14 23:09:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnda3ee6c2x 2026-07-14 23:10:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqndckyvok2v 2026-07-14 23:11:04+00:00| seen|...

CVE-2026-62186

creationtimestamp| type| source ---|---|--- 2026-07-14 14:02:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqmeoeeuin2e 2026-07-14 14:02:51+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116918699311489381...

CVE-2026-11798

The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'heateormastodonshare' parameter in all versions up to, and including, 7.14.5 due to insufficient input sanitization and output escaping. This...

CVE-2026-11798

The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'heateormastodonshare' parameter in all versions up to, and including, 7.14.5 due to insufficient input sanitization and output escaping. This...

EUVD-2026-42168

The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'heateormastodonshare' parameter in all versions up to, and including, 7.14.5 due to insufficient input sanitization and output escaping. This...

CVE-2026-11798

The CVE concerns the WordPress plugin Social Share, Social Login and Social Comments Plugin – Super Socializer . It is vulnerable to Reflected Cross-Site Scripting via the parameter heateor_mastodon_share in all versions up to and including 7.14.5 , caused by insufficient input sanitization and o...

CVE-2026-11798 Social Share, Social Login and Social Comments Plugin <= 7.14.5 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter

The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'heateormastodonshare' parameter in all versions up to, and including, 7.14.5 due to insufficient input sanitization and output escaping. This...

BIT-MASTODON-2026-50129 Mastodon: Persistent anonymous DoS via unhandled NoMethodError in MATH_TRANSFORMER

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.11, 4.4.18, and 4.3.24, a DoS can be triggered by Uncaught Exception vulerability, due to missing exception handling in the math sanitizer. Malformed nodes can result in a DoS of a whole server or targeted...

BIT-MASTODON-2026-50128 Mastodon: Spoofing of attribution domains

Mastodon is a free, open-source social network server based on ActivityPub. From 4.3.0 until 4.5.11 and 4.4.18, Mastodon has a feature to let websites credit authors of their articles. To prevent false attribution claims, Mastodon uses the attributionDomains JSON-LD term, however, an error in how...

BIT-MASTODON-2026-48028 Mastodon: Removal of integrity-protected JSON entries from signed activities

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17, and 4.3.23, Mastodon's normalization of incoming activities signed with Linked-Data Signatures does not sufficiently protect the activities from a certain class of spoofing, allowing threat actors...

BIT-MASTODON-2026-47389 Mastodon: SSRF protection bypass on older Ruby versions

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17, and 4.3.23, when using Ruby versions older than 3.4, PrivateAddressCheck.privateaddress? returns false for IPv4-mapped IPv6 addresses ::ffff:a.b.c.d corresponding to some private IPv4 addresses,...