CVE-2026-51769

creationtimestamp| type| source ---|---|--- 2026-09-02 19:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muknq43khm25...

CVE-2026-51764

creationtimestamp| type| source ---|---|--- 2026-09-02 19:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukn6asdf72p...

CVE-2026-51757

creationtimestamp| type| source ---|---|--- 2026-09-02 19:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukmmfkj2h22...

CVE-2026-51750

creationtimestamp| type| source ---|---|--- 2026-09-02 19:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukmmdz6bs2t...

CVE-2026-19593

creationtimestamp| type| source ---|---|--- 2026-09-02 18:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukjswn5eg25...

CVE-2026-51728

creationtimestamp| type| source ---|---|--- 2026-09-02 16:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukdoajga32w...

CVE-2025-8945

creationtimestamp| type| source ---|---|--- 2026-09-02 16:12:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fed5kuzc5ligr...

CVE-2026-82884

The All in One SEO WordPress plugin before 5.0.0.1 does not sanitise and escape some content stored in posts before rendering it back in the post editor, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks that trigger when a higher privilege...

CVE-2026-17563

The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through...

CVE-2026-80206

creationtimestamp| type| source ---|---|--- 2026-09-02 15:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muk7lrd2v52x 2026-09-08 22:36:02+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-w3v8-gmh9-3wv7...

CVE-2026-76642

When an external mount. helper runs but exits with a nonzero status, libmount still treats the helper invocation as successful and runs privileged post-mount hooks. A local unprivileged user with an /etc/fstab entry that uses the user option together with X-mount.idmap or X-mount.owner/group/mode...

EUVD-2026-70045

The All in One SEO WordPress plugin before 5.0.0.1 does not sanitise and escape some content stored in posts before rendering it back in the post editor, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks that trigger when a higher privilege...

CVE-2026-17563

User Frontend WordPress plugin (versions before 4.3.11 ) enforces its subscription-purchase requirement only when rendering a frontend form, not when processing the actual post submission. This allows unauthenticated users to create—and, depending on form configuration, immediately publish —posts...

EUVD-2026-70035

The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through...

CVE-2026-17563 WP User Frontend < 4.3.11 - Unauthenticated Post Creation via Subscription-Gated Form

The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through...

CVE-2026-17563 WP User Frontend < 4.3.11 - Unauthenticated Post Creation via Subscription-Gated Form

The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through...

CVE-2026-81286

creationtimestamp| type| source ---|---|--- 2026-09-02 14:07:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muk4ahvex52t 2026-09-02 18:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukkeslksq22...

CVE-2026-84694

creationtimestamp| type| source ---|---|--- 2026-09-02 13:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muk3bywlay2o...

CVE-2026-84775

creationtimestamp| type| source ---|---|--- 2026-09-02 13:23:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6qhhiar7ftvkq...

CVE-2026-82209

creationtimestamp| type| source ---|---|--- 2026-09-02 12:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mujx3y4rb22k 2026-09-09 20:01:31+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mv4dcnqryc2u...