CVE-2026-85131 WPLP Cookie Consent < 4.4.4 - Arbitrary Post Deletion via CSRF

The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk actions on its administration screens, and does not restrict the targeted items to its own records, allowing attackers to make a logged in admin permanently delete arbitrary posts...

WordPress Schema & Structured Data for WP & AMP plugin 1.63-1.65 - Contributor+ Non-Public Post Content Disclosure vulnerability

Contributor+ Non-Public Post Content Disclosure vulnerability discovered by Shirshak in WordPress Plugin Schema & Structured Data for WP & AMP versions 1.63-1.65...

WordPress Schema & Structured Data for WP & AMP plugin < 1.66 - Unauthenticated Password-Protected Post Content Disclosure vulnerability

Unauthenticated Password-Protected Post Content Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Schema & Structured Data for WP & AMP versions 1.66...

CVE-2026-82126

The Schema & Structured Data for WP & AMP WordPress plugin (versions 1.63–1.65 ) contains an improper access control flaw in its AI schema generation feature. The plugin fails to verify that a requesting user is permitted to edit the specific post they target for schema generation, allowing any u...

CVE-2026-82124 Schema & Structured Data for WP & AMP < 1.66 - Unauthenticated Password-Protected Post Content Disclosure via JSON-LD Schema Output

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including its content in the structured data it generates, allowing unauthenticated users to obtain the content of password protected posts via more than one public...

EUVD-2026-80189

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing users with the contributor role and above to obtain the content of other users' draft, pending, private and password...

CVE-2024-0399

CVE-2024-0399 - WooCommerce Customers Manager 29.4 - Inyección SQL Post-Autenticación Título del Exploit: WooCommerce Customers Manager 29.4 - Inyección SQL Post-Autenticación Fecha: 2024-03-25 Autor del Exploit: Ivan Spiridonov - xbz0n Enlace del Software:...

CVE-2024-33911

The School Management 10.3.4 - Post-Authenticated SQL Injection Exploit Title: The School Management 10.3.4 - Post-Authenticated SQL Injection Date: 29 April, 2024 Exploit Author: Ivan Spiridonov xbz0n Vendor Homepage: https://theschool-management.com Version: 10.3.4 Tested on: Ubuntu 22.04 CVE:...

CVE-2026-87886

creationtimestamp| type| source ---|---|--- 2026-09-16 02:27:45+00:00| seen| https://bsky.app/profile/abijita.bsky.social/post/3mvm3osvhv32w 2026-09-16 03:09:26+00:00| seen| https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvm5zerud22j 2026-09-16 03:15:25+00:00| seen|...

CVE-2026-87184

creationtimestamp| type| source ---|---|--- 2026-09-16 02:14:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2xvgqfk2f 2026-09-16 07:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmkvthlv62f 2026-09-23 03:07:07+00:00| seen|...

CVE-2026-87176

creationtimestamp| type| source ---|---|--- 2026-09-16 02:14:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2xnlmsj2p 2026-09-16 06:50:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmke25hyp2y 2026-09-23 08:48:14+00:00| seen|...

CVE-2026-87175

creationtimestamp| type| source ---|---|--- 2026-09-16 02:14:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2xfq55j2j 2026-09-16 06:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmkdxpfdo2t 2026-09-23 08:48:16+00:00| seen|...

CVE-2026-87173

creationtimestamp| type| source ---|---|--- 2026-09-16 02:14:31+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2x5xi2e2y 2026-09-16 06:40:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmjs542it2t 2026-09-23 08:48:20+00:00| seen|...

CVE-2026-87170

creationtimestamp| type| source ---|---|--- 2026-09-16 02:14:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2wnzirr2j 2026-09-16 06:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmjrzejxg2b 2026-09-23 08:48:26+00:00| seen|...

CVE-2026-87128

creationtimestamp| type| source ---|---|--- 2026-09-16 02:13:57+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2w5cy7u2y 2026-09-16 06:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmja4pyg62w 2026-09-22 11:07:06+00:00| seen|...

CVE-2026-83462

creationtimestamp| type| source ---|---|--- 2026-09-16 02:13:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2vvih2t2t 2026-09-16 06:20:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmioe2udw25 2026-09-16 16:00:44+00:00| seen|...

CVE-2026-83452

creationtimestamp| type| source ---|---|--- 2026-09-16 02:13:40+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2vn7t3c2b 2026-09-16 04:20:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmbxtwtka2r 2026-09-16 16:00:44+00:00| seen|...

CVE-2026-83339

creationtimestamp| type| source ---|---|--- 2026-09-16 02:13:22+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2v4j5pc2b 2026-09-16 04:10:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmbfwcr4v2t 2026-09-16 07:01:56+00:00| seen|...

CVE-2026-87214

creationtimestamp| type| source ---|---|--- 2026-09-16 02:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm2pcykte2g 2026-09-22 10:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mw3y5r7dzn2v 2026-09-23 08:46:58+00:00| seen|...

CVE-2026-83260

creationtimestamp| type| source ---|---|--- 2026-09-16 00:14:54+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlubb662a2f 2026-09-16 01:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlyzkn7zf2p 2026-09-23 09:18:15+00:00| seen|...