CVE-2026-13339

creationtimestamp| type| source ---|---|--- 2026-08-02 01:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2rtm67nw2n 2026-08-02 08:36:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3ldebc5q2e 2026-08-02 08:36:59+00:00| seen|...

CVE-2026-67291

creationtimestamp| type| source ---|---|--- 2026-08-02 00:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2oiob3iy2t...

CVE-2026-67304

creationtimestamp| type| source ---|---|--- 2026-08-02 00:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2oihufp22b 2026-08-02 17:09:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117027006957378264...

CVE-2026-14864: Improper Neutralization of Input During Web Page Generation

The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortcodes, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of higher-privileged users such as...

PT-2026-67054

The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortcodes, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of higher-privileged users such as...

CVE-2026-16273: Improper Neutralization of Input During Web Page Generation

The Narrative Publisher WordPress plugin through 1.0.7 does not restrict write access to a REST-exposed post meta field or escape it when rendering, allowing users with contributor-level access and above to store JavaScript that executes in the browser of any higher-privileged user who views the...

PT-2026-67102

The Narrative Publisher WordPress plugin through 1.0.7 does not restrict write access to a REST-exposed post meta field or escape it when rendering, allowing users with contributor-level access and above to store JavaScript that executes in the browser of any higher-privileged user who views the...

PT-2026-67093

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not sanitise or escape event timeline content submitted by users with post-editing access before storing it and rendering it on the public event page, allowing users with the Author role and above to inject arbitrary...

CVE-2026-67300

creationtimestamp| type| source ---|---|--- 2026-08-01 23:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2l56spgn2z...

CVE-2026-67339

creationtimestamp| type| source ---|---|--- 2026-08-01 22:02:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2huriq3b2x 2026-08-01 22:02:27+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3ms2huylfhn2c 2026-08-01 22:02:35+00:00| seen|...

CVE-2026-67308

creationtimestamp| type| source ---|---|--- 2026-08-01 21:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2egyp24c2b 2026-08-01 21:27:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117022368056209142 2026-08-02 12:28:05+00:00| seen|...

CVE-2026-67289

creationtimestamp| type| source ---|---|--- 2026-08-01 20:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bpmtxek2l 2026-08-02 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117024740061481140 2026-08-05 02:24:03+00:00| seen|...

CVE-2026-66402

creationtimestamp| type| source ---|---|--- 2026-08-01 20:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bm2o5mc2a 2026-08-02 09:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ms3mnkwzbp2x 2026-08-02 09:02:35+00:00| seen|...

CVE-2026-67322

creationtimestamp| type| source ---|---|--- 2026-08-01 20:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2b3pco2k2x 2026-09-08 16:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-rwj8-pgh3-r573...

CVE-2026-67331

creationtimestamp| type| source ---|---|--- 2026-08-01 20:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2b3iwxgv2a 2026-08-01 22:07:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2i54ja5f2z 2026-08-01 23:08:19+00:00| seen|...

CVE-2026-16087

creationtimestamp| type| source ---|---|--- 2026-08-01 18:02:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22h4yedw2x 2026-08-01 18:50:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms255f454d24 2026-08-01 18:50:20+00:00| seen|...

CVE-2026-67330

creationtimestamp| type| source ---|---|--- 2026-08-01 18:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms22eznwih2t 2026-08-01 20:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2c2eapxu2s 2026-08-01 22:17:15+00:00| seen|...

CVE-2026-67328

creationtimestamp| type| source ---|---|--- 2026-08-01 18:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms22etaago2p 2026-08-01 22:34:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jolkde62v 2026-08-01 22:34:53+00:00| seen|...

CVE-2026-17555

creationtimestamp| type| source ---|---|--- 2026-08-01 17:56:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms224hqqya2m 2026-08-01 18:41:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms24na2omo2d...

CVE-2026-17580

creationtimestamp| type| source ---|---|--- 2026-08-01 17:53:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzymh7nm25 2026-08-01 18:45:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms24u4wgky2x 2026-08-01 18:45:08+00:00| seen|...