Ditty < 3.1.25 - Cross-Site Scripting

The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-4148 info: name: Ditty 3.1.25 ...

Ditty (formerly Ditty News Ticker) < 3.0.15 - Cross-Site Scripting

The Ditty formerly Ditty News Ticker WordPress plugin before 3.0.15 is affected by a Reflected Cross-Site Scripting XSS vulnerability. id: CVE-2022-0533 info: name: Ditty formerly Ditty News Ticker 3.0.15 - Cross-Site Scripting author: r3Y3r53 severity: medium description: | The Ditty formerly...

News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion

The News & Blog Designer Pack WordPress plugin up to version 3.4.1 contains a remote code execution caused by local file inclusion in the bdpgetmorepost function, letting unauthenticated attackers include arbitrary PHP files, exploit requires AJAX request with crafted POST data. id: CVE-2023-5815...

CVE-2026-17583

creationtimestamp| type| source ---|---|--- 2026-08-03 10:00:38+00:00| seen| https://thehackernews.com/2026/08/thermo-fisher-patches-flaw-that-could.html 2026-08-03 10:01:31+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ms6ajowixy2u 2026-08-03 11:17:27+00:00|...

Joomla! Component News Portal 1.5.x - Local File Inclusion

A directory traversal vulnerability in the iJoomla News Portal comnewsportal component 1.5.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1312 info: name: Joomla! Component News Portal 1.5.x - Local File...

CVE-2019-13117

creationtimestamp| type| source ---|---|--- 2026-07-29 12:03:23+00:00| seen| https://t.me/linuxnews/592 2026-07-30 00:03:09+00:00| seen| https://t.me/linuxnews/592 2026-08-04 06:00:04+00:00| seen| https://t.me/linuxnews/592...

CVE-2026-60004

creationtimestamp| type| source ---|---|--- 2026-07-29 07:59:42+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrhfbohdx2w 2026-07-29 08:02:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mrrhkep54z23 2026-07-29 09:00:07+00:00| seen|...

CVE-2026-8167

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in THEWP Digital Solutions News Theme V8 allows Reflected XSS. This issue affects News Theme V8: through 16.06.2026...

CVE-2026-8167

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in THEWP Digital Solutions News Theme V8 allows Reflected XSS. This issue affects News Theme V8: through 16.06.2026...

CVE-2026-8167

CVE-2026-8167 describes a Reflected XSS vulnerability in THEWP Digital Solutions’ News Theme V8. The issue stems from improper neutralization of input during web page generation , enabling reflected cross-site scripting. Affected product: News Theme V8 (up to 16.06.2026). The documents do not pro...

CVE-2026-8167 Reflected XSS in theWP's News Theme V8

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in THEWP Digital Solutions News Theme V8 allows Reflected XSS. This issue affects News Theme V8: through 16.06.2026...

EUVD-2026-49719

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in THEWP Digital Solutions News Theme V8 allows Reflected XSS. This issue affects News Theme V8: through 16.06.2026...

CVE-2016-5582

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:20+00:00| seen| https://t.me/KaitNews/425 2026-07-27 00:01:56+00:00| seen| https://t.me/KaitNews/425...

CVE-2016-4331

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:16+00:00| seen| https://t.me/KaitNews/1059 2026-07-27 00:01:53+00:00| seen| https://t.me/KaitNews/1059...

CVE-2016-4330

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:16+00:00| seen| https://t.me/KaitNews/1059 2026-07-27 00:01:54+00:00| seen| https://t.me/KaitNews/1059...

CVE-2016-6564

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:16+00:00| seen| https://t.me/KaitNews/986 2026-07-27 00:01:54+00:00| seen| https://t.me/KaitNews/986...

CVE-2016-9949

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:14+00:00| seen| https://t.me/KaitNews/1651 2026-07-26 07:02:14+00:00| seen| https://t.me/KaitNews/1725 2026-07-27 00:01:52+00:00| seen| https://t.me/KaitNews/1651 2026-07-27 00:01:52+00:00| seen| https://t.me/KaitNews/1725...

CVE-2017-5069

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:05+00:00| seen| https://t.me/KaitNews/4131 2026-07-27 00:01:46+00:00| seen| https://t.me/KaitNews/4131 2026-08-04 12:00:08+00:00| seen| https://t.me/KaitNews/4131...

CVE-2017-8571

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:03+00:00| seen| https://t.me/KaitNews/4747 2026-07-27 00:01:43+00:00| seen| https://t.me/KaitNews/4747 2026-08-04 10:00:05+00:00| seen| https://t.me/KaitNews/4747...

CVE-2017-8572

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:03+00:00| seen| https://t.me/KaitNews/4747 2026-07-27 00:01:43+00:00| seen| https://t.me/KaitNews/4747 2026-08-04 10:00:05+00:00| seen| https://t.me/KaitNews/4747...