CVE-2026-6453

creationtimestamp| type| source ---|---|--- 2026-08-01 10:22:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jaeeialp5gym4 2026-08-01 17:33:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzyur7if52x 2026-08-01 17:34:09+00:00| seen|...

CVE-2026-13157

creationtimestamp| type| source ---|---|--- 2026-08-01 10:20:08+00:00| seen| https://bsky.app/profile/smartdeals.bsky.social/post/3mrzan5fore2x 2026-08-01 13:00:04+00:00| seen| Telegram/zkpMdkb1nwTnC0N6uNzVvNYCe5r6OIkmQsBbvblzOMqyUQE 2026-08-01 14:55:17+00:00| seen|...

CVE-2026-18062

creationtimestamp| type| source ---|---|--- 2026-08-01 10:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ibokoolakvlm2 2026-08-01 17:44:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzihv5tx2d 2026-08-01 17:45:13+00:00| seen|...

CVE-2026-17580

The Advanced Views – Display Custom Fields ACF, Pods, MetaBox, Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the registerrestroutes. This makes it...

CVE-2026-2916

The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the enqueuescripts method in class/dashboard/class-dashboard.php. The plugin injects a JkitDashboardOption JavaScript object containing full plugin...

EUVD-2026-51742

The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to second-order SQL Injection via 'messagesid' Parameter in all versions up to, and including, 3.1.42 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

CVE-2026-13458 GenerateBlocks <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes

The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-14839

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-2916

The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the enqueuescripts method in class/dashboard/class-dashboard.php. The plugin injects a JkitDashboardOption JavaScript object containing full plugin...

CVE-2026-2916 Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script

The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the enqueuescripts method in class/dashboard/class-dashboard.php. The plugin injects a JkitDashboardOption JavaScript object containing full plugin...

CVE-2026-58178

creationtimestamp| type| source ---|---|--- 2026-08-01 06:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mryu6dkplb2v...

CVE-2026-14839 Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14839 Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14839

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

EUVD-2026-51711

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14839

The Mapster WP Maps WordPress plugin (versions before 1.24.0 ) contains a vulnerability where it fails to perform authorization or post-status checks on a public REST endpoint. This allows unauthenticated users to retrieve the title and full content of any post, including those with statuses such...

WordPress Mapster WP Maps plugin < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure vulnerability

Unauthenticated Private and Draft Post Content Disclosure vulnerability discovered by Alexander Jurkschat in WordPress Plugin Mapster WP Maps versions 1.24.0...

CVE-2026-14195

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...

CVE-2026-14195 Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...

CVE-2026-14195

The Brizy WordPress plugin, in versions prior to 2.8.18 , contains an authorization bypass vulnerability. The flaw exists in a request handler that fails to properly verify permissions before returning post content. This allows users with a Contributor role or higher to access and read arbitrary ...