CVE-2026-86148

creationtimestamp| type| source ---|---|--- 2026-09-05 22:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muskueclpq2r 2026-09-06 00:07:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3musp6dc33e2r 2026-09-06 02:02:27+00:00| seen|...

CVE-2026-18905

creationtimestamp| type| source ---|---|--- 2026-09-05 21:02:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3musetqdmm62s...

CVE-2026-86189

creationtimestamp| type| source ---|---|--- 2026-09-05 13:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3murlkz2j4e2t 2026-09-05 14:07:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3murnofntd52g 2026-09-05 17:00:24+00:00| seen|...

CVE-2026-86185

creationtimestamp| type| source ---|---|--- 2026-09-05 13:01:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3murjyj2qfs2v 2026-09-05 13:53:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2wjemuur3b77s...

CVE-2026-19306

creationtimestamp| type| source ---|---|--- 2026-09-05 12:04:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3murgs5sj3k2r...

CVE-2026-86169

creationtimestamp| type| source ---|---|--- 2026-09-05 12:03:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3murgqnqr3m2k 2026-09-05 15:05:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3murqvdpms22n...

CVE-2026-86177

creationtimestamp| type| source ---|---|--- 2026-09-05 12:03:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3murgqh3sn32k 2026-09-08 09:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muynuyi4uk2r...

CVE-2026-53706

creationtimestamp| type| source ---|---|--- 2026-09-05 09:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mur65u34ow2p...

CVE-2026-19303

creationtimestamp| type| source ---|---|--- 2026-09-05 09:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mur4k45iiv2e 2026-09-09 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mv4nojtopj2r...

CVE-2026-81543

creationtimestamp| type| source ---|---|--- 2026-09-05 09:00:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mur4il5mmt2z 2026-09-05 09:42:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ij34ttkscy3j3 2026-09-07 00:00:21+00:00| seen|...

CVE-2026-75018

The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-lev...

WordPress Custom Contact Forms plugin <= 7.16 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Deletion and Post Meta Modification via Nested 'fields[].ID' / 'choices[].ID' Parameters vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Post Deletion and Post Meta Modification via Nested 'fields.ID' / 'choices.ID' Parameters vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Custom Contact Forms versions = 7.16...

CVE-2026-19887

creationtimestamp| type| source ---|---|--- 2026-09-05 08:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muqz5s5so222...

CVE-2026-75018

Custom Contact Forms WordPress plugin (all versions up to and including 7.16 ) contains an authorization bypass due to missing capability checks on nested fields[].ID and choices[].ID parameters processed by _create_and_map_fields() and _create_and_map_choices(). While the top-level form ID is gu...

CVE-2026-75018 Custom Contact Forms <= 7.16 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Deletion and Post Meta Modification via Nested 'fields[].ID' / 'choices[].ID' Parameters

The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-lev...

EUVD-2026-71933

The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-lev...

CVE-2026-75018 Custom Contact Forms <= 7.16 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Deletion and Post Meta Modification via Nested 'fields[].ID' / 'choices[].ID' Parameters

The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-lev...

CVE-2026-78149

The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected before returning its content and its stored password through an unauthenticated AJAX action, allowing unauthenticated users to read protected post content and the password that guards it...

CVE-2026-78150

The Smart Post WordPress plugin before 4.0.8 does not check the type, ownership or status of the post it is asked to duplicate, allowing users with contributor privileges and above to copy any private or password protected post into a draft of their own and read its content and metadata...

CVE-2026-16649

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Body Field Value in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...