CVE-2026-9676

creationtimestamp| type| source ---|---|--- 2026-06-29 08:19:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2j4zj562q 2026-06-29 10:52:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgczuutu62n 2026-06-29 20:47:24+00:00| seen|...

CVE-2026-13537

creationtimestamp| type| source ---|---|--- 2026-06-29 08:09:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfzx2zswj2a 2026-06-29 10:48:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgctwjk7522 2026-06-29 13:09:08+00:00| seen|...

CVE-2026-13541

creationtimestamp| type| source ---|---|--- 2026-06-29 08:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfzs6miwm2o 2026-06-29 11:18:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgejefew62n 2026-06-29 20:00:10+00:00| seen|...

CVE-2026-53325

creationtimestamp| type| source ---|---|--- 2026-06-29 07:52:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfyyjq4ti2y 2026-06-29 10:40:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcg2parh2d 2026-06-30 02:58:28+00:00| seen|...

CVE-2026-9676

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

CVE-2026-54815

creationtimestamp| type| source ---|---|--- 2026-06-29 07:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpfwxrmzjl2i...

CVE-2026-9676 f4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

EUVD-2026-40040

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

CVE-2026-9676

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

CVE-2026-9676

The vulnerability CVE-2026-9676 affects the F4 Post Tree WordPress plugin prior to 2.0.5. The issue arises because the plugin does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the...

CVE-2026-13538

A vulnerability was determined in Wavlink WL-NU516U1-A M16U1V240425. The affected element is the function sub401D68 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. This manipulation of the argument SSID2G2/SSID5G2/AuthMethod2/WPAPSK12 causes command injection. Remote...

CVE-2026-13538 Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection

A vulnerability was determined in Wavlink WL-NU516U1-A M16U1V240425. The affected element is the function sub401D68 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. This manipulation of the argument SSID2G2/SSID5G2/AuthMethod2/WPAPSK12 causes command injection. Remote...

EUVD-2026-40036

A vulnerability was determined in Wavlink WL-NU516U1-A M16U1V240425. The affected element is the function sub401D68 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. This manipulation of the argument SSID2G2/SSID5G2/AuthMethod2/WPAPSK12 causes command injection. Remote...

CVE-2026-13521

creationtimestamp| type| source ---|---|--- 2026-06-29 04:53:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfoywemip2e...

CVE-2026-47193

creationtimestamp| type| source ---|---|--- 2026-06-29 01:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpfbyraaz22y...

CVE-2026-49991

creationtimestamp| type| source ---|---|--- 2026-06-29 01:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpfby6r6fp2x 2026-06-29 05:10:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpfpwvwcr226...

CVE-2026-56123

creationtimestamp| type| source ---|---|--- 2026-06-29 00:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpfaoajjhc2y...

CVE-2026-13513

creationtimestamp| type| source ---|---|--- 2026-06-29 00:28:28+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpfa6sd5lg2m 2026-06-29 02:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfg2pst3i2w...

PT-2026-53251

Name of the Vulnerable Software and Affected Versions Edimax EW-7478APC version 1.04 Description An OS command injection flaw exists in the POST Request Handler component. A remote attacker can exploit this by manipulating the submit-url argument within the formAccept function of the...

CVE-2026-13510

creationtimestamp| type| source ---|---|--- 2026-06-28 23:37:28+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpf5dm2lfr26 2026-06-29 02:03:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpffisxqe62w...