CVE-2021-31838

creationtimestamp| type| source ---|---|--- 2026-02-24 18:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmqogbmpz2r...

PT-2026-20607

The Breadcrumb NavXT plugin for WordPress is vulnerable to authorization bypass through user-controlled key in versions up to and including 7.5.0. This is due to the Gutenberg block renderer trusting the $ REQUEST'post id' parameter without verification in the...

CVE-2020-36990

creationtimestamp| type| source ---|---|--- 2026-01-28 14:44:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdij5ksm2r2t...

CVE-2025-68139

creationtimestamp| type| source ---|---|--- 2026-01-21 21:53:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxnuhr5hv2j...

CVE-2026-21981

creationtimestamp| type| source ---|---|--- 2026-01-20 23:43:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcvdjtp42m2n 2026-01-21 16:25:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcx3jeuaqh2n 2026-01-21 21:18:16+00:00| seen|...

CVE-2025-61937

creationtimestamp| type| source ---|---|--- 2026-01-16 05:43:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcjfcjz7hk2u 2026-01-16 19:03:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mckryspp622u...

CVE-2023-54332

Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject malicious scripts through the postid parameter. Attackers can craft malicious URLs with script payloads to execute arbitrary JavaScript in victims' browsers when they interact wit...

CVE-2023-54332

Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject malicious scripts through the postid parameter. Attackers can craft malicious URLs with script payloads to execute arbitrary JavaScript in victims' browsers when they interact wit...

CVE-2023-54332 Jetpack 11.4 - Cross Site Scripting (XSS)

Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject malicious scripts through the postid parameter. Attackers can craft malicious URLs with script payloads to execute arbitrary JavaScript in victims' browsers when they interact wit...

WordPress plugin Jetpack 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site...

CVE-2022-0411

The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the postid parameter before using it in a SQL statement via a REST route of the plugin accessible to any authenticated user, leading to a SQL injection...

SQL Injection

Overview ghost is a publishing platform Affected versions of this package are vulnerable to SQL Injection via the /ghost/api/admin/members/events endpoint due to the improper validation of postId. An attacker can execute arbitrary SQL commands by sending crafted requests to this endpoint while...

CVE-2025-14080

CVE-2025-14080 concerns the WordPress plugin Frontend Post Submission Manager Lite. The vulnerability is due to missing authorization on the fpsml_form_process AJAX action, allowing unauthenticated attackers to modify arbitrary posts by supplying a post_id via the guest posting form. Reported imp...

PT-2025-52576

Name of the Vulnerable Software and Affected Versions Frontend Post Submission Manager Lite plugin versions through 1.2.5 Description The Frontend Post Submission Manager Lite plugin for WordPress has an issue where authorization checks are missing on the post update functionality within the fpsm...

CVE-2025-12492

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajaxgetmembers function. This is due to the use of a...

CVE-2025-27019

creationtimestamp| type| source ---|---|--- 2025-12-08 10:59:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7husodd2t2j 2025-12-08 13:54:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115684281889620141 2025-12-09 03:53:17+00:00| seen|...

CVE-2025-13631

creationtimestamp| type| source ---|---|--- 2025-12-02 22:54:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6zzxz5ygy26 2025-12-03 08:07:10+00:00| seen| https://gist.github.com/Darkcrai86/bced0ef5a348403be47f49dfc336e88a 2025-12-03 08:56:59+00:00| seen|...

CVE-2025-13765

creationtimestamp| type| source ---|---|--- 2025-11-27 16:28:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ms24ep622k...

CVE-2025-33514

creationtimestamp| type| source ---|---|--- 2025-11-18 12:37:03+00:00| seen| https://bsky.app/profile/ransomnews.online/post/3m5vqvwddxx24...

CVE-2025-64182

creationtimestamp| type| source ---|---|--- 2025-11-08 23:42:25+00:00| published-proof-of-concept| https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-vh63-9mqx-wmjr 2025-11-11 00:20:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5cuibdzc62q...