CVE-2026-85513

creationtimestamp| type| source ---|---|--- 2026-09-04 13:30:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d2zsqmklqrkun...

CVE-2026-85614

creationtimestamp| type| source ---|---|--- 2026-09-04 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muozyctl5y2l 2026-09-04 14:07:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mup5762f3a2w...

CVE-2026-78596

creationtimestamp| type| source ---|---|--- 2026-09-04 12:40:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoydcqpi623...

CVE-2026-82299

creationtimestamp| type| source ---|---|--- 2026-09-04 12:40:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoydcqpi623...

CVE-2026-78583

creationtimestamp| type| source ---|---|--- 2026-09-04 12:40:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoydcqpi623 2026-09-09 23:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mv4pe63ej32b...

CVE-2026-80536

creationtimestamp| type| source ---|---|--- 2026-09-04 12:35:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoy24g4c32a...

CVE-2026-80583

creationtimestamp| type| source ---|---|--- 2026-09-04 12:35:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoy24g4c32a...

CVE-2026-85403

creationtimestamp| type| source ---|---|--- 2026-09-04 11:08:16+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3muot6j7pgy2u...

CVE-2026-85546

creationtimestamp| type| source ---|---|--- 2026-09-04 10:56:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4hdkxyhjnkx75...

CVE-2026-84428

creationtimestamp| type| source ---|---|--- 2026-09-04 10:27:32+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3muoqvmwms225 2026-09-04 13:06:39+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3muozs7o5py2y...

CVE-2026-76169

creationtimestamp| type| source ---|---|--- 2026-09-04 09:54:28+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3muop2ikyjc25...

CVE-2026-85094

creationtimestamp| type| source ---|---|--- 2026-09-04 07:04:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/j5vsxotiacu2n 2026-09-04 08:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muoip2kztd2l...

CVE-2026-84066 Directorist < 8.9 - Subscriber+ Arbitrary Post Meta Write via atbdp_post_attachment_upload

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify that the requesting user owns the post being modified before writing uploaded file references to its metadata, allowing users with the subscriber role and above to overwrite image...

CVE-2026-84146 Xpro Elementor Addons < 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick View

The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.8 does not perform any capability or post-status check before rendering a WooCommerce product summary from a supplied product identifier, allowing unauthenticated visitors to retrieve the title, price, SKU, description and...

CVE-2026-84146

The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.8 does not perform any capability or post-status check before rendering a WooCommerce product summary from a supplied product identifier, allowing unauthenticated visitors to retrieve the title, price, SKU, description and...

CVE-2026-84066

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify that the requesting user owns the post being modified before writing uploaded file references to its metadata, allowing users with the subscriber role and above to overwrite image...

WordPress Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin < 8.9 - Subscriber+ Arbitrary Post Meta Write vulnerability

Subscriber+ Arbitrary Post Meta Write vulnerability discovered by ryan zegar in WordPress Plugin Directorist versions 8.9...

CVE-2026-84066 Directorist < 8.9 - Subscriber+ Arbitrary Post Meta Write via atbdp_post_attachment_upload

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify that the requesting user owns the post being modified before writing uploaded file references to its metadata, allowing users with the subscriber role and above to overwrite image...

EUVD-2026-70913

The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.8 does not perform any capability or post-status check before rendering a WooCommerce product summary from a supplied product identifier, allowing unauthenticated visitors to retrieve the title, price, SKU, description and...

CVE-2026-80438 Ninja Forms 3.14.0 - 3.15.1 - Authenticated Arbitrary Post Modification and Sensitive Information Disclosure via Abilities REST API

The Ninja Forms WordPress plugin before 3.15.2 does not restrict its REST abilities to administrators, accepting a Ninja Forms WordPress plugin before 3.15.2-specific capability as equivalent to full site administration, which allows any user granted that capability to read Ninja Forms WordPress...