CVE-2026-82483

creationtimestamp| type| source ---|---|--- 2026-08-30 10:14:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3oz7m7fecgazc 2026-08-30 12:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-82483...

CVE-2026-14835 SOGO Add Script to Individual Pages Header Footer <= 3.9 - Contributor+ Stored XSS via Post Metabox

The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, and does not restrict them to users with the unfilteredhtml capability, allowing users with contributor-level access a...

CVE-2026-14835 SOGO Add Script to Individual Pages Header Footer <= 3.9 - Contributor+ Stored XSS via Post Metabox

The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, and does not restrict them to users with the unfilteredhtml capability, allowing users with contributor-level access a...

CVE-2026-14835

The SOGO Add Script to Individual Pages Header Footer WordPress plugin (versions prior to 4.0 ) contains a Stored Cross-Site Scripting (XSS) vulnerability. The plugin fails to sanitize or escape custom header and footer script values saved via the post metabox and does not restrict these actions ...

CVE-2026-77007

creationtimestamp| type| source ---|---|--- 2026-08-30 05:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mubmcdov752r...

CVE-2026-15980

creationtimestamp| type| source ---|---|--- 2026-08-30 04:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mublpnoyf22e 2026-08-30 05:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mubpml4wj226 2026-08-30 06:07:08+00:00| seen|...

CVE-2026-75759

creationtimestamp| type| source ---|---|--- 2026-08-30 01:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mubbntrvst2u 2026-08-30 02:14:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/54rlv4xt7hs33 2026-08-31 01:04:23+00:00| seen|...

CVE-2026-77012

creationtimestamp| type| source ---|---|--- 2026-08-30 01:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mubbns6sbh2p 2026-08-30 05:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mubmbvx3xf2r...

CVE-2026-16947

creationtimestamp| type| source ---|---|--- 2026-08-30 01:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mubb3wwzap23 2026-08-30 06:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mubpokeexh2b...

CVE-2026-16259

creationtimestamp| type| source ---|---|--- 2026-08-30 01:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mubb3vfq6m2y 2026-08-30 07:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mubsyrw63z2r...

PT-2026-83523

Name of the Vulnerable Software and Affected Versions SOGO Add Script to Individual Pages Header Footer versions prior to 4.0 Description The plugin fails to sanitize or escape custom header and footer script values saved via the post metabox. Additionally, it does not restrict these actions to...

Linux Distros Unpatched Vulnerability : CVE-2026-82467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirmpassword, loginreturntorequestedlocation, and...

Linux Distros Unpatched Vulnerability : CVE-2026-82469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh toke...

CVE-2026-53499

creationtimestamp| type| source ---|---|--- 2026-08-29 22:44:50+00:00| seen| https://bsky.app/profile/altdigitallatam.org/post/3muaxckwmzs2h...

CVE-2026-80693

creationtimestamp| type| source ---|---|--- 2026-08-29 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muafppnhtz2y...

CVE-2026-82469

Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh token. Attackers can present an access token to the refresh route via non-POST methods to obtain a new valid access token, enabling indefinit...

CVE-2026-82468

Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to...

CVE-2026-82469 Rodauth before 2.47.0 Authentication Bypass via jwt_refresh

Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh token. Attackers can present an access token to the refresh route via non-POST methods to obtain a new valid access token, enabling indefinit...

CVE-2026-82469 Rodauth before 2.47.0 Authentication Bypass via jwt_refresh

Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh token. Attackers can present an access token to the refresh route via non-POST methods to obtain a new valid access token, enabling indefinit...

CVE-2026-82468

Rodauth versions before 2.47.0 contain a cross-site request forgery (CSRF) protection bypass in the JSON request content type validation. An attacker can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation, forcing victims to aut...