CVE-2026-11364

creationtimestamp| type| source ---|---|--- 2026-06-27 10:00:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpb7ajukvi2d 2026-06-27 23:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpclomo2ch2h...

CVE-2026-10820

creationtimestamp| type| source ---|---|--- 2026-06-27 09:55:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpb6wg555k2q...

HID: usbhid: fix deadlock in hid_post_reset()

...

CVE-2026-9677

creationtimestamp| type| source ---|---|--- 2026-06-27 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpawti42vq2g 2026-06-27 10:10:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpb7rx3jze23...

EUVD-2026-39955

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via panelsdata Parameter in all versions up to, and including, 2.34.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

MAL-2026-6545 Malicious code in crossmint-wallets-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4caebfba35b43bf10f156fe687f455e95b09a514b8644fe1a900b63f1bf78a Package name impersonates the Crossmint wallet SDK family. Both preinstall.js and index.js import childprocess, capture host identifiers hostname is...

CVE-2025-60466

creationtimestamp| type| source ---|---|--- 2026-06-27 03:37:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpajtif47i2y 2026-06-30 00:07:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphphyuczd2q...

CVE-2025-60467

creationtimestamp| type| source ---|---|--- 2026-06-27 03:32:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpajkjapgq2v 2026-06-28 02:30:49+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mpcwkncjr422 2026-06-29 23:49:46+00:00| seen|...

CVE-2026-13335

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-13335

The CodePeople Post Map for Google Maps WordPress plugin is vulnerable to Stored XSS via the 'cpm_point' Post Meta in all versions up to 1.2.6 due to insufficient input sanitization and output escaping. Authenticated attackers with Contributor-level access or higher can inject arbitrary scripts t...

CVE-2026-13335 CodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post Meta

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-39929

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-13335

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

[SECURITY] Fedora 44 Update: nginx-1.30.3-1.fc44

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...

PT-2026-53041

Name of the Vulnerable Software and Affected Versions CodePeople Post Map for Google Maps versions prior to 1.2.7 Description Insufficient input sanitization and output escaping allow authenticated attackers with Contributor-level access and above to perform Stored Cross-Site Scripting. This is...

PT-2026-53057

Name of the Vulnerable Software and Affected Versions Frisbii Pay versions prior to 1.9.0 Description Authenticated users with Subscriber-level access and above can perform unauthorized modification of data. This is caused by missing capability checks in the upload csv and process batch functions...

CVE-2026-52785

creationtimestamp| type| source ---|---|--- 2026-06-26 23:45:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa4twxjql23 2026-06-28 19:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpenuzqf3u2x...

CVE-2026-50767

creationtimestamp| type| source ---|---|--- 2026-06-26 22:47:01+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7zljs7au2o 2026-06-29 17:33:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgzi6wa632w...

CVE-2026-49359

creationtimestamp| type| source ---|---|--- 2026-06-26 22:28:37+00:00| seen| https://bsky.app/profile/suriq.io/post/3mp7ykmyves2b 2026-06-27 00:35:49+00:00| published-proof-of-concept| https://github.com/pontedilana/php-weasyprint/security/advisories/GHSA-x8g9-h984-pc36...

CVE-2026-53577

creationtimestamp| type| source ---|---|--- 2026-06-26 22:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7xqoommh2c 2026-06-29 19:17:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7bzbop323 2026-07-01 13:22:30+00:00| seen|...