47302 matches found
CVE-2026-79657
creationtimestamp| type| source ---|---|--- 2026-08-25 14:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtvykcwfyn24 2026-08-25 21:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtwrt2mobg2t 2026-08-28 15:00:04+00:00| published-proof-of-concept|...
WordPress TaxoPress plugin < 3.51.0 - Contributor+ Private Post Disclosure via IDOR vulnerability
Contributor+ Private Post Disclosure via IDOR vulnerability discovered by Duy Tran in WordPress Plugin TaxoPress versions 3.51.0...
CVE-2026-15571
creationtimestamp| type| source ---|---|--- 2026-08-25 12:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtvtwiw3pf26...
CVE-2026-79671
creationtimestamp| type| source ---|---|--- 2026-08-25 12:20:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5gnu35b4glaqj...
CVE-2026-75908
The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and...
WordPress f4 Post Tree plugin < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification vulnerability
Subscriber+ Arbitrary Post Parent/Menu Order Modification vulnerability discovered by Mustafa Ahmed in WordPress Plugin F4 Post Tree versions 2.0.5...
WordPress Frontend File Manager Plugin plugin <= 23.6 - Author+ Arbitrary Post Deletion vulnerability
Author+ Arbitrary Post Deletion vulnerability discovered by Tiago Ferreira in WordPress Plugin Frontend File Manager versions = 23.6...
CVE-2026-75908 Newsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter
The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and...
CVE-2026-75908 Newsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter
The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and...
EUVD-2026-65464
The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and...
CVE-2026-75908
The Newsletters plugin for WordPress (all versions up to and including 4.17 ) is susceptible to an authorization bypass due to missing verification of user permissions. An authenticated attacker with author-level access or above can forge the newsletters_mailinglistsroles POST field during a norm...
CVE-2026-77143
creationtimestamp| type| source ---|---|--- 2026-08-25 09:34:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvjbfcwp22s...
CVE-2026-78563
creationtimestamp| type| source ---|---|--- 2026-08-25 09:31:54+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvj4upyrf2a 2026-08-25 12:01:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtvric23xy2y 2026-08-25 12:01:25+00:00| seen|...
CVE-2026-78264
creationtimestamp| type| source ---|---|--- 2026-08-25 09:15:56+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtviagth6v22 2026-08-25 14:04:06+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtvydptuwn2i 2026-08-25 14:04:07+00:00| seen|...
CVE-2026-66882
creationtimestamp| type| source ---|---|--- 2026-08-25 09:14:39+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvi65yggp2t...
CVE-2026-77140
TYPO3 extension Telephone Directory (telephonedirectory) suffers from a Broken Access Control flaw. The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, but not in the action that persists the change. As a result, an unauthenticated visi...
WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability
WordPress ACPT Pro - Custom Post Types Plugin for WordPress plugin = 2.0.63 - SQL Injection vulnerability discovered by VDsec in WordPress Plugin ACPT Pro - Custom Post Types Plugin for WordPress versions = 2.0.63...
WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability
WordPress ACPT Pro - Custom Post Types Plugin for WordPress plugin = 2.0.63 - Privilege Escalation vulnerability discovered by VDsec in WordPress Plugin ACPT Pro - Custom Post Types Plugin for WordPress versions = 2.0.63...