CVE-2026-13459 JetFormBuilder <= 3.6.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'context' Parameter

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated...

CVE-2026-13459

JetFormBuilder for WordPress (Dynamic Blocks Form Builder) is affected up to version 3.6.3 due to an authorization bypass in the get_from_db generator. Unauthenticated attackers can retrieve distinct values stored in wp_postmeta (including Woocommerce PII like _billing_email, _billing_phone, and ...

CVE-2026-13459

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated...

CVE-2026-11578

creationtimestamp| type| source ---|---|--- 2026-07-02 08:30:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnmjyq3om26 2026-07-02 20:12:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpotr7dht427...

CVE-2026-11965

creationtimestamp| type| source ---|---|--- 2026-07-02 08:15:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnlp5dwuo2m 2026-07-02 20:05:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoternhxa2r...

CVE-2026-13455

creationtimestamp| type| source ---|---|--- 2026-07-02 07:57:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnkpe4emx2i...

CVE-2026-11600

creationtimestamp| type| source ---|---|--- 2026-07-02 07:56:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnkmhbiqe2n 2026-07-02 20:09:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpotl54boy2w...

CVE-2026-10077

creationtimestamp| type| source ---|---|--- 2026-07-02 07:53:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnkhkvusl2g 2026-07-02 20:05:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpotdw4dge26...

CVE-2026-57737

creationtimestamp| type| source ---|---|--- 2026-07-02 07:45:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnjzizekm2i 2026-07-20 22:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr4emijjsd2o 2026-07-21 08:44:08+00:00| seen|...

CVE-2026-49088

creationtimestamp| type| source ---|---|--- 2026-07-02 07:33:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnjcw7lzb2m 2026-07-02 13:50:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6flfadf2t...

CVE-2026-58036

creationtimestamp| type| source ---|---|--- 2026-07-02 06:35:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpng4i6bdz2y...

CVE-2026-14082

creationtimestamp| type| source ---|---|--- 2026-07-02 06:23:17+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpnffzighe2f 2026-07-02 06:23:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnffzq3dt2q 2026-07-02 07:51:49+00:00| seen|...

CVE-2026-14079

creationtimestamp| type| source ---|---|--- 2026-07-02 06:08:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpneltan3y2t 2026-07-02 07:51:43+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 11:09:06+00:00| seen|...

CVE-2026-58169

creationtimestamp| type| source ---|---|--- 2026-07-02 05:53:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndr3nhhx2o...

EUVD-2026-41247

The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4. This is due to insufficient path validation in the ImageBackup::remove function where backup file paths stored in post meta are used directly in file deletion operations withou...

CVE-2026-5821 Image Optimizer <= 1.7.4 - Authenticated (Author+) Arbitrary File Deletion via Post Meta Field Injection

The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4. This is due to insufficient path validation in the ImageBackup::remove function where backup file paths stored in post meta are used directly in file deletion operations withou...

CVE-2026-5821

The CVE-2026-5821 entry details a vulnerability in the WordPress Image Optimizer plugin (versions up to 1.7.4). The root cause is insufficient path validation in Image_Backup::remove(), where backup file paths stored in the image_optimizer_metadata post meta are used directly for deletion without...

CVE-2026-5821

The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4. This is due to insufficient path validation in the ImageBackup::remove function where backup file paths stored in post meta are used directly in file deletion operations withou...

CVE-2026-5821 Image Optimizer <= 1.7.4 - Authenticated (Author+) Arbitrary File Deletion via Post Meta Field Injection

The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4. This is due to insufficient path validation in the ImageBackup::remove function where backup file paths stored in post meta are used directly in file deletion operations withou...

EUVD-2026-41244

The Envo's Templates & Widgets for Elementor and WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing authorization check on the Envo Tabs and Off Canvas widget's template rendering in versions up to, and including, 1.4.26. The render method of the Tabs...