CVE-2026-9626 JSON API User <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter

The JSON API User plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter of the postcomment API endpoint in versions up to, and including, 4.1.0 This is due to insufficient input sanitization in the postcomment function, which passes the attacker-controlled...

CVE-2026-9626 JSON API User <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter

The JSON API User plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter of the postcomment API endpoint in versions up to, and including, 4.1.0 This is due to insufficient input sanitization in the postcomment function, which passes the attacker-controlled...

CVE-2026-58652

creationtimestamp| type| source ---|---|--- 2026-07-03 04:04:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppo4hmy6r2j 2026-07-03 10:25:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqdguittd2n...

CVE-2026-4772

creationtimestamp| type| source ---|---|--- 2026-07-03 03:54:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppnkmjaf22n...

CVE-2025-69152

creationtimestamp| type| source ---|---|--- 2026-07-03 03:23:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppltpagqm2j...

CVE-2026-13373

creationtimestamp| type| source ---|---|--- 2026-07-03 03:16:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpplhrjxmc2i 2026-07-03 19:00:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpra6phkd22u...

CVE-2026-13375

creationtimestamp| type| source ---|---|--- 2026-07-03 03:11:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppl6t2q2w2a 2026-07-03 18:57:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr7zfqp3e2b...

CVE-2026-13377

creationtimestamp| type| source ---|---|--- 2026-07-03 03:06:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppkvul2s423 2026-07-03 19:01:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpraacul4g2n...

CVE-2026-13053

creationtimestamp| type| source ---|---|--- 2026-07-03 02:28:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppirwdfub2s 2026-07-03 18:54:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr7uahbt623 2026-07-10 17:36:59+00:00| seen|...

CVE-2026-13383

creationtimestamp| type| source ---|---|--- 2026-07-03 02:27:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppioqydmu2o 2026-07-03 18:54:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr7tigbkc2f 2026-07-13 00:37:07+00:00| seen|...

CVE-2026-7840

creationtimestamp| type| source ---|---|--- 2026-07-03 02:25:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mppilesqv727 2026-07-09 11:43:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq7klorntc2s 2026-08-03 21:00:18+00:00| seen|...

CVE-2026-47896

creationtimestamp| type| source ---|---|--- 2026-07-03 01:32:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mppfmtl25u23 2026-07-03 10:35:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqdym2t6v2h 2026-07-03 22:59:32+00:00| seen|...

CVE-2026-12729

The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 2.3.0. This is due to a missing capability check on the domigration function registered as the wedocsmigratebetterdocstowedocs...

CVE-2026-47898

creationtimestamp| type| source ---|---|--- 2026-07-03 01:27:24+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mppfduifi62z 2026-07-03 10:14:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqcsdn5u22o 2026-07-03 22:36:26+00:00| seen|...

CVE-2026-57752

creationtimestamp| type| source ---|---|--- 2026-07-03 00:44:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcwgsjxk2y 2026-07-03 03:50:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppneacn7w2d 2026-07-03 14:42:48+00:00| seen|...

CVE-2026-57690

creationtimestamp| type| source ---|---|--- 2026-07-03 00:36:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcjg4u4s2k...

CVE-2026-57730

creationtimestamp| type| source ---|---|--- 2026-07-03 00:32:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcbblchq2y...

CVE-2026-57685

creationtimestamp| type| source ---|---|--- 2026-07-03 00:31:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcaftjf22j...

CVE-2026-57680

creationtimestamp| type| source ---|---|--- 2026-07-03 00:30:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppc5i3gkv2u...

CVE-2026-57688

creationtimestamp| type| source ---|---|--- 2026-07-03 00:20:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppblew3m62o 2026-07-03 14:07:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqpsu2gh22k 2026-08-01 11:44:07+00:00| seen|...