CVE-2026-56877

creationtimestamp| type| source ---|---|--- 2026-07-13 10:58:03+00:00| seen| https://bsky.app/profile/payloadforge.io/post/3mqjjvhw2y22k 2026-07-14 04:39:32+00:00| seen| https://bsky.app/profile/r-redteamsec.bsky.social/post/3mqlf7jrwah2i 2026-07-16 05:32:01+00:00| seen|...

CVE-2026-57787

creationtimestamp| type| source ---|---|--- 2026-07-13 10:53:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjjnftzyh2e...

CVE-2026-57392

creationtimestamp| type| source ---|---|--- 2026-07-13 10:47:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjjckoy4d2w 2026-07-16 07:55:30+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr3sel3524...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the shared channel inbound sync handler. An attacker can modify or delete posts belonging to other users by sending crafted synchronization messages that reference arbitrary post IDs i...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the shared channel inbound sync handler. An attacker can modify or delete posts belonging to other users by sending crafted synchronization messages that reference arbitrary post IDs i...

Authorization Bypass Through User-Controlled Key

Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the incoming webhook process. An attacker can impersonate another user and create posts or...

CVE-2026-57713

creationtimestamp| type| source ---|---|--- 2026-07-13 10:38:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjisq5ohb24 2026-07-14 01:35:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql2wgk6lm2i 2026-07-16 08:16:30+00:00| seen|...

CVE-2026-61970

Server-Side Request Forgery SSRF vulnerability in Themeisle Auto Featured Image Auto Post Thumbnail auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image Auto Post Thumbnail: from n/a through = 5.0.4...

CVE-2026-6850

creationtimestamp| type| source ---|---|--- 2026-07-13 09:38:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjfgfdc4x26 2026-07-13 09:48:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjfycu6co22 2026-07-13 09:48:06+00:00| seen|...

CVE-2026-62143

creationtimestamp| type| source ---|---|--- 2026-07-13 09:37:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjffc5gow2y...

EUVD-2026-43289

The Tutor LMS WordPress plugin before 3.9.13 does not verify that the requesting user is allowed to edit a target post before overwriting it in one of its content-builder save handlers, authorizing the request only against an unrelated identifier, allowing authenticated users with instructor-leve...

CVE-2026-10103

Mattermost versions 11.7.x = 11.7.2, 11.6.x = 11.6.4, 10.11.x = 10.11.19 fail to verify post ownership in the shared channel inbound sync handler, which allows an authenticated remote cluster to modify or delete posts authored by local users or other remotes via crafted sync messages referencing...

CVE-2026-10106

Mattermost versions 11.7.x = 11.7.2, 11.6.x = 11.6.4, 10.11.x = 10.11.19 fail to verify that the channel referenced in an action cookie matches the channel of the target post, which allows an authenticated user without access to a private channel to trigger interactive post actions on posts in th...

EUVD-2026-43439

Server-Side Request Forgery SSRF vulnerability in Themeisle Auto Featured Image Auto Post Thumbnail auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image Auto Post Thumbnail: from n/a through = 5.0.4...

CVE-2026-61970

Server-Side Request Forgery SSRF vulnerability in Themeisle Auto Featured Image Auto Post Thumbnail auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image Auto Post Thumbnail: from n/a through = 5.0.4...

CVE-2026-61970 WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Themeisle Auto Featured Image Auto Post Thumbnail auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image Auto Post Thumbnail: from n/a through = 5.0.4...

CVE-2026-61970

The CVE-2026-61970 entry concerns a Server-Side Request Forgery (SSRF) in the Themeisle Auto Featured Image (Auto Post Thumbnail) WordPress plugin. Affected versions are &lt;= 5.0.4 (reported as from n/a through

CVE-2026-61970 WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Themeisle Auto Featured Image Auto Post Thumbnail auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image Auto Post Thumbnail: from n/a through = 5.0.4...

CVE-2026-15544

creationtimestamp| type| source ---|---|--- 2026-07-13 08:39:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjc5ehkbe27 2026-07-13 10:27:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqji6zqhl32w...

CVE-2026-15540

creationtimestamp| type| source ---|---|--- 2026-07-13 08:33:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjbt62nwu27 2026-07-13 10:08:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjh4ix3v227...