CVE-2026-78379

creationtimestamp| type| source ---|---|--- 2026-08-25 20:08:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwmovwkty2m 2026-08-26 01:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtx5kkus2g2p 2026-08-26 14:47:54+00:00| seen|...

CVE-2022-50998

creationtimestamp| type| source ---|---|--- 2026-08-25 18:54:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwilrryzn2j...

CVE-2024-58378

creationtimestamp| type| source ---|---|--- 2026-08-25 18:07:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwfxkocp42c...

WordPress Newsletters plugin <= 4.17 - Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter vulnerability

Authenticated Author+ Arbitrary Modification via 'newslettersmailinglistsroles' POST Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Newsletters versions = 4.17...

CVE-2026-70550

creationtimestamp| type| source ---|---|--- 2026-08-25 16:14:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a2aqosgh42arr 2026-09-01 13:55:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muhl4f5ksr2k...

Server-side Request Forgery (SSRF)

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

CVE-2026-79664

creationtimestamp| type| source ---|---|--- 2026-08-25 14:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtvyklkvcx2f...

CVE-2026-79657

creationtimestamp| type| source ---|---|--- 2026-08-25 14:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtvykcwfyn24 2026-08-25 21:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtwrt2mobg2t 2026-08-28 15:00:04+00:00| published-proof-of-concept|...

WordPress TaxoPress plugin < 3.51.0 - Contributor+ Private Post Disclosure via IDOR vulnerability

Contributor+ Private Post Disclosure via IDOR vulnerability discovered by Duy Tran in WordPress Plugin TaxoPress versions 3.51.0...

CVE-2026-15571

creationtimestamp| type| source ---|---|--- 2026-08-25 12:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtvtwiw3pf26...

CVE-2026-79671

creationtimestamp| type| source ---|---|--- 2026-08-25 12:20:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5gnu35b4glaqj...

CVE-2026-75908

The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and...

WordPress f4 Post Tree plugin < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification vulnerability

Subscriber+ Arbitrary Post Parent/Menu Order Modification vulnerability discovered by Mustafa Ahmed in WordPress Plugin F4 Post Tree versions 2.0.5...

WordPress Frontend File Manager Plugin plugin <= 23.6 - Author+ Arbitrary Post Deletion vulnerability

Author+ Arbitrary Post Deletion vulnerability discovered by Tiago Ferreira in WordPress Plugin Frontend File Manager versions = 23.6...

CVE-2026-75908 Newsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter

The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and...

CVE-2026-75908 Newsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter

The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and...

EUVD-2026-65464

The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and...

CVE-2026-75908

The Newsletters plugin for WordPress (all versions up to and including 4.17 ) is susceptible to an authorization bypass due to missing verification of user permissions. An authenticated attacker with author-level access or above can forge the newsletters_mailinglistsroles POST field during a norm...

CVE-2026-77143

creationtimestamp| type| source ---|---|--- 2026-08-25 09:34:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvjbfcwp22s...

CVE-2026-78563

creationtimestamp| type| source ---|---|--- 2026-08-25 09:31:54+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvj4upyrf2a 2026-08-25 12:01:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtvric23xy2y 2026-08-25 12:01:25+00:00| seen|...