47127 matches found
EUVD-2026-66990
Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
CVE-2026-32564 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability
Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
CVE-2026-80586
creationtimestamp| type| source ---|---|--- 2026-08-27 08:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2hq2qwvc25 2026-08-27 16:23:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...
CVE-2026-80561
creationtimestamp| type| source ---|---|--- 2026-08-27 08:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2h65amoc24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...
CVE-2026-19401
creationtimestamp| type| source ---|---|--- 2026-08-27 08:23:07+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mu2g7t33ysfm...
CVE-2026-80551
creationtimestamp| type| source ---|---|--- 2026-08-27 08:20:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2g2etdac25 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...
CVE-2026-74752
creationtimestamp| type| source ---|---|--- 2026-08-27 08:00:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2ewomzgq24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...
CVE-2026-74746
creationtimestamp| type| source ---|---|--- 2026-08-27 07:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2eesm3jj2e 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...
WordPress Slim SEO plugin < 4.9.11 - Contributor+ Arbitrary Post Meta Disclosure vulnerability
Contributor+ Arbitrary Post Meta Disclosure vulnerability discovered by Shivamani Vastrala in WordPress Plugin Slim SEO versions 4.9.11...
CVE-2026-74737
creationtimestamp| type| source ---|---|--- 2026-08-27 07:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2dsuodje24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...
CVE-2026-15990
creationtimestamp| type| source ---|---|--- 2026-08-27 04:02:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzxmxp2jw2o...
CVE-2026-80212
creationtimestamp| type| source ---|---|--- 2026-08-27 02:29:30+00:00| seen| https://bsky.app/profile/hsbt.org/post/3mtzshizd5k2u 2026-08-30 12:00:54+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mucdrzvkb22r...
CVE-2026-76784
creationtimestamp| type| source ---|---|--- 2026-08-27 02:15:28+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtzrohda632e 2026-08-27 16:21:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mu3axdwp7c2e...
SUSE CVE-2026-68525
Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from...
CVE-2026-81279: Missing Authorization
Subscriber Broken Access Control in Push Notification for Post and BuddyPress = 3.20 versions...
CVE-2026-65931: Missing Authorization
LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint. An authenticated user with only the global settings:read permission can directly invoke POST /index.php/admin/menuentries/sa/create and create new survey...
PT-2026-82474
Subscriber Broken Access Control in Push Notification for Post and BuddyPress = 3.20 versions...
CVE-2026-37071: Improper Privilege Management
Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission to take over the super administrator account via a specially crafted POST request to the affected endpoint renaming th...
CVE-2026-80207: Missing Authentication for Critical Function
APITable through 1.13.0-beta.1 annotates the create handler of InternalNotifyController with requiredLogin = false. ResourceInterceptor honours that annotation by returning before any session or API key is validated, and the nginx gateway shipped with the product proxies every /api request to the...