CVE-2026-1667: Missing Authorization

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Arbitrary Post Creation and Stored Cross-Site Scripting in all versions up to, and including, 14.0.0 due to a leak of an API token and insufficient input sanitization and output escaping. This makes it possible for unauthenticat...

CVE-2026-13430: Unrestricted Upload of File with Dangerous Type

The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.13.1 via the importmediafilesecure function. This is due to insufficient file extension validation caused by a trailing-dot filename bypass, where the extension...

PT-2026-57063

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized post publication in all versions up to, and including, 3.5.32 due to a misconfigured capability check on the 'get items permission check' function permission callback of the...

PT-2026-57228

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Arbitrary Post Creation and Stored Cross-Site Scripting in all versions up to, and including, 14.0.0 due to a leak of an API token and insufficient input sanitization and output escaping. This makes it possible for unauthenticat...

CVE-2026-61456: Improper Neutralization of Input During Web Page Generation

The Grav API plugin getgrav/grav-plugin-api before 1.0.3 fails to sanitize SVG files uploaded through the POST /api/v1/media endpoint. The HandlesMediaUploads::processUploadedFile method validates only the file extension and never invokes Security::sanitizeSVG, so an authenticated attacker with t...

CVE-2026-59857

creationtimestamp| type| source ---|---|--- 2026-07-09 23:59:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqatocvbfn27 2026-07-10 19:55:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcwjkgqfw22 2026-07-11 01:31:44+00:00| seen|...

CVE-2026-8848

creationtimestamp| type| source ---|---|--- 2026-07-09 23:11:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqyjvs3y2d 2026-07-10 05:58:57+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mqbhrulgss2o...

CVE-2026-44787

creationtimestamp| type| source ---|---|--- 2026-07-09 23:04:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqaqmco25h25 2026-07-19 19:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqzjp4zwah26...

CVE-2026-59219

creationtimestamp| type| source ---|---|--- 2026-07-09 23:01:37+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqaqhmqfhn26 2026-07-24 18:35:12+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-855v-hq7w-jmjw...

CVE-2026-55207

creationtimestamp| type| source ---|---|--- 2026-07-09 22:39:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqapant6yq2x...

CVE-2026-31984

creationtimestamp| type| source ---|---|--- 2026-07-09 22:37:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap4ausyc2w 2026-07-10 17:45:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcpajcdya2s 2026-07-11 07:37:07+00:00| seen|...

CVE-2026-55604

creationtimestamp| type| source ---|---|--- 2026-07-09 22:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqap3r6pk42e 2026-07-10 05:01:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqbeluswmw2a 2026-08-25 20:35:12+00:00| published-proof-of-concept|...

CVE-2026-14343

creationtimestamp| type| source ---|---|--- 2026-07-09 22:36:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap2z4o2n2y...

CVE-2026-12418

creationtimestamp| type| source ---|---|--- 2026-07-09 22:35:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoymz6fi2d...

CVE-2026-13334

creationtimestamp| type| source ---|---|--- 2026-07-09 22:33:58+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqaow6cts72m 2026-07-09 22:34:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaowapx3u22...

CVE-2026-13011

creationtimestamp| type| source ---|---|--- 2026-07-09 22:33:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaovmmzsi2c...

CVE-2026-15000

creationtimestamp| type| source ---|---|--- 2026-07-09 22:33:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaouyr2752e...

CVE-2026-31982

creationtimestamp| type| source ---|---|--- 2026-07-09 22:31:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaorjqils2e 2026-07-10 17:26:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcoa34a5y2y...

CVE-2026-12406

creationtimestamp| type| source ---|---|--- 2026-07-09 22:30:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoqckz5u2z...

CVE-2026-59828

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked through visible diffs on adjacent revisions serialized by PostRevisionSerializer. This issue is fixed in versions 2026.6.0,...