CVE-2026-77143

creationtimestamp| type| source ---|---|--- 2026-08-25 09:34:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvjbfcwp22s...

CVE-2026-78563

creationtimestamp| type| source ---|---|--- 2026-08-25 09:31:54+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvj4upyrf2a 2026-08-25 12:01:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtvric23xy2y 2026-08-25 12:01:25+00:00| seen|...

CVE-2026-78264

creationtimestamp| type| source ---|---|--- 2026-08-25 09:15:56+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtviagth6v22 2026-08-25 14:04:06+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtvydptuwn2i 2026-08-25 14:04:07+00:00| seen|...

CVE-2026-66882

creationtimestamp| type| source ---|---|--- 2026-08-25 09:14:39+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvi65yggp2t...

CVE-2026-77140

TYPO3 extension Telephone Directory (telephonedirectory) suffers from a Broken Access Control flaw. The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, but not in the action that persists the change. As a result, an unauthenticated visi...

WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability

WordPress ACPT Pro - Custom Post Types Plugin for WordPress plugin = 2.0.63 - SQL Injection vulnerability discovered by VDsec in WordPress Plugin ACPT Pro - Custom Post Types Plugin for WordPress versions = 2.0.63...

WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability

WordPress ACPT Pro - Custom Post Types Plugin for WordPress plugin = 2.0.63 - Privilege Escalation vulnerability discovered by VDsec in WordPress Plugin ACPT Pro - Custom Post Types Plugin for WordPress versions = 2.0.63...

CVE-2026-74688

creationtimestamp| type| source ---|---|--- 2026-08-25 07:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtvbrb5kma2u...

CVE-2026-74587

creationtimestamp| type| source ---|---|--- 2026-08-25 06:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv5u4zxvj2f...

CVE-2026-74586

creationtimestamp| type| source ---|---|--- 2026-08-25 06:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv5u3hm5a23 2026-09-09 16:00:06+00:00| seen| Telegram/idrq8GCshAndCL-cMA1Uoj2VzIrne5jNTdbo8AkO8RR-nM 2026-09-09 16:00:07+00:00| published-proof-of-concept|...

CVE-2026-78207

creationtimestamp| type| source ---|---|--- 2026-08-25 05:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv2irmr2t25...

CVE-2026-75930

The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.8.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated...

CVE-2026-75930 FundEngine <= 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'campaign_post' Parameter

The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.8.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated...

CVE-2026-75930 FundEngine <= 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'campaign_post' Parameter

The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.8.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated...

WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Modification vulnerability discovered by Wordfence PRISM in WordPress Plugin FundEngine versions = 1.8.1...

CVE-2026-75930

FundEngine – Donation and Crowdfunding Platform for WordPress (all versions up to and including 1.8.1 ) suffers from an authorization bypass due to missing authorization verification. An authenticated attacker with subscriber-level access or above can modify arbitrary posts and pages — overwritin...

CVE-2026-72702

creationtimestamp| type| source ---|---|--- 2026-08-25 03:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtutsbu6id25 2026-08-25 04:08:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzzyhhc2c 2026-08-25 04:30:24+00:00| seen|...

CVE-2026-56707

creationtimestamp| type| source ---|---|--- 2026-08-25 02:25:17+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mturc5bqhs2j...

CVE-2026-56710

creationtimestamp| type| source ---|---|--- 2026-08-25 02:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuqgxw2sc2u 2026-08-25 04:07:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzjuvpw2p...

EUVD-2026-65158

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...