PT-2026-86473

Name of the Vulnerable Software and Affected Versions Frontend Admin by DynamiApps versions prior to 3.29.13 Description An authentication bypass allows unauthenticated attackers to take over accounts. The issue occurs because the pre update value function lacks capability or ownership checks, an...

CVE-2026-19283

creationtimestamp| type| source ---|---|--- 2026-09-05 23:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3musliq75y52r 2026-09-06 00:32:10+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3musqkwmryf2r...

CVE-2026-86149

creationtimestamp| type| source ---|---|--- 2026-09-05 22:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muskufwazg22 2026-09-06 00:07:30+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3musp6ta4jo2n...

CVE-2026-86148

creationtimestamp| type| source ---|---|--- 2026-09-05 22:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muskueclpq2r 2026-09-06 00:07:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3musp6dc33e2r 2026-09-06 02:02:27+00:00| seen|...

CVE-2026-18905

creationtimestamp| type| source ---|---|--- 2026-09-05 21:02:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3musetqdmm62s...

CVE-2026-86189

creationtimestamp| type| source ---|---|--- 2026-09-05 13:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3murlkz2j4e2t 2026-09-05 14:07:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3murnofntd52g 2026-09-05 17:00:24+00:00| seen|...

CVE-2026-86185

creationtimestamp| type| source ---|---|--- 2026-09-05 13:01:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3murjyj2qfs2v 2026-09-05 13:53:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2wjemuur3b77s...

CVE-2026-19306

creationtimestamp| type| source ---|---|--- 2026-09-05 12:04:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3murgs5sj3k2r...

CVE-2026-86169

creationtimestamp| type| source ---|---|--- 2026-09-05 12:03:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3murgqnqr3m2k 2026-09-05 15:05:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3murqvdpms22n...

CVE-2026-86177

creationtimestamp| type| source ---|---|--- 2026-09-05 12:03:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3murgqh3sn32k 2026-09-08 09:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muynuyi4uk2r...

CVE-2026-53706

creationtimestamp| type| source ---|---|--- 2026-09-05 09:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mur65u34ow2p...

CVE-2026-19303

creationtimestamp| type| source ---|---|--- 2026-09-05 09:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mur4k45iiv2e 2026-09-09 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mv4nojtopj2r...

CVE-2026-81543

creationtimestamp| type| source ---|---|--- 2026-09-05 09:00:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mur4il5mmt2z 2026-09-05 09:42:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ij34ttkscy3j3 2026-09-07 00:00:21+00:00| seen|...

CVE-2026-75018

The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-lev...

WordPress Custom Contact Forms plugin <= 7.16 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Deletion and Post Meta Modification via Nested 'fields[].ID' / 'choices[].ID' Parameters vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Post Deletion and Post Meta Modification via Nested 'fields.ID' / 'choices.ID' Parameters vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Custom Contact Forms versions = 7.16...

CVE-2026-19887

creationtimestamp| type| source ---|---|--- 2026-09-05 08:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muqz5s5so222...

CVE-2026-75018

Custom Contact Forms WordPress plugin (all versions up to and including 7.16 ) contains an authorization bypass due to missing capability checks on nested fields[].ID and choices[].ID parameters processed by _create_and_map_fields() and _create_and_map_choices(). While the top-level form ID is gu...

CVE-2026-75018 Custom Contact Forms <= 7.16 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Deletion and Post Meta Modification via Nested 'fields[].ID' / 'choices[].ID' Parameters

The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-lev...

EUVD-2026-71933

The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-lev...

CVE-2026-75018 Custom Contact Forms <= 7.16 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Deletion and Post Meta Modification via Nested 'fields[].ID' / 'choices[].ID' Parameters

The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-lev...