49432 matches found
CVE-2026-16965 Solace Extra < 1.6.1 - Subscriber+ Post Meta Update via solace_update_sitebuilder_status
The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, allowing any authenticated user such as a subscriber and, via CSRF, any logged-in user to update post meta on arbitrary posts and to deactivate the site's active templates...
CVE-2026-71986
creationtimestamp| type| source ---|---|--- 2026-08-09 02:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msmigy7i6q27 2026-08-09 13:30:13+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msnoyffrml2k...
CVE-2026-71993
creationtimestamp| type| source ---|---|--- 2026-08-09 00:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmctj6fur2q 2026-08-09 01:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117062960952906332 2026-08-09 01:30:30+00:00| seen|...
CVE-2026-13344
creationtimestamp| type| source ---|---|--- 2026-08-09 00:18:18+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmcmiopux2g 2026-08-09 20:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msofoafgbf2z...
CVE-2026-71984
creationtimestamp| type| source ---|---|--- 2026-08-09 00:12:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmcbpazap2o...
PT-2026-69264
Name of the Vulnerable Software and Affected Versions Solace Extra versions prior to 1.6.1 Description The Solace Extra WordPress plugin fails to perform capability or nonce checks in an AJAX action. This allows any authenticated user, including those with subscriber privileges, to update post me...
CVE-2026-16965: Cross-Site Request Forgery (CSRF)
The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, allowing any authenticated user such as a subscriber and, via CSRF, any logged-in user to update post meta on arbitrary posts and to deactivate the site's active templates...
CVE-2026-16957: Authorization Bypass Through User-Controlled Key
The Slim SEO WordPress plugin before 4.9.11 does not restrict a post-meta preview feature to posts the user is allowed to edit, verifying only read access, allowing users with the Contributor role to read arbitrary post meta, including protected and private keys, of published posts they do not ow...
PT-2026-69263
Name of the Vulnerable Software and Affected Versions Slim SEO versions prior to 4.9.11 Description A post-meta preview feature fails to restrict access to posts that the user is authorized to edit, verifying only read access. This allows users with the Contributor role to read arbitrary post met...
CVE-2026-15257
creationtimestamp| type| source ---|---|--- 2026-08-08 20:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mslv7c4uaq2i 2026-08-09 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msnyb3cao62a...
CVE-2026-71953
creationtimestamp| type| source ---|---|--- 2026-08-08 17:16:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mslkzt3iao2u 2026-08-09 05:02:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msmskczots25...
CVE-2026-71952
creationtimestamp| type| source ---|---|--- 2026-08-08 17:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mslkzripjp27 2026-08-08 18:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jyuesx3qptyww 2026-08-09 05:01:17+00:00| seen|...
CVE-2025-13394
creationtimestamp| type| source ---|---|--- 2026-08-08 16:58:07+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3msljzgftka2h...
CVE-2026-14318
creationtimestamp| type| source ---|---|--- 2026-08-08 10:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msktogxmm42z...
CVE-2026-14526
creationtimestamp| type| source ---|---|--- 2026-08-08 09:48:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msks5rpsg62f 2026-08-08 13:31:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/117060129732420475 2026-08-08 22:17:16+00:00| seen|...
CVE-2026-48097
creationtimestamp| type| source ---|---|--- 2026-08-08 07:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mskirptsnh23...
CVE-2026-14207
creationtimestamp| type| source ---|---|--- 2026-08-08 05:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskcvzesxg25...
CVE-2015-6609
creationtimestamp| type| source ---|---|--- 2026-08-08 04:30:05+00:00| seen| https://bsky.app/profile/grapheneos.org/post/3mskadlvn4c2c 2026-08-08 15:03:18+00:00| seen| https://bsky.app/profile/grapheneos.org/post/3msldpwlkik2w 2026-08-09 03:19:22+00:00| seen|...