CVE-2026-47240

creationtimestamp| type| source ---|---|--- 2026-06-24 12:00:57+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mozukgu2nh2p...

CVE-2026-4983

creationtimestamp| type| source ---|---|--- 2026-06-24 11:40:04+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3moztf4hs7n2y...

CVE-2026-56052

creationtimestamp| type| source ---|---|--- 2026-06-24 11:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozrolt35i2m...

CVE-2026-52939

creationtimestamp| type| source ---|---|--- 2026-06-24 10:54:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozqtqd6ep23 2026-07-06 06:24:58+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-52936

creationtimestamp| type| source ---|---|--- 2026-06-24 10:36:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozptg2oal2m...

CVE-2026-52931

creationtimestamp| type| source ---|---|--- 2026-06-24 10:02:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moznx4fjsb23 2026-07-01 02:47:19+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:24:44+00:00| seen|...

CVE-2026-7761

creationtimestamp| type| source ---|---|--- 2026-06-24 08:29:44+00:00| seen| https://bsky.app/profile/suriq.io/post/3moziqqecbx2r 2026-06-24 13:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozzioqcpk2s 2026-06-26 10:15:09+00:00| seen|...

CVE-2026-8628

creationtimestamp| type| source ---|---|--- 2026-06-24 08:16:22+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mozhyueuiw2q...

CVE-2026-12417

creationtimestamp| type| source ---|---|--- 2026-06-24 08:03:09+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mozhba5qeo2p 2026-06-24 10:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mozpiorzoj2l 2026-06-24 10:30:38+00:00| seen|...

CVE-2026-12416

creationtimestamp| type| source ---|---|--- 2026-06-24 08:03:01+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mozhayscl62p 2026-06-24 09:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116804264395356312 2026-06-24 09:00:35+00:00| seen|...

CVE-2026-9179

The WP Forms Connector plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/wp/v3/post/list REST endpoint in versions up to and including 1.8. This is due to insufficient escaping on the user-supplied 'order' parameter read directly from $GET'order' into...

CVE-2026-8688

The Advance Nav Menu Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2026-10749

The Post Duplicator WordPress plugin before 3.0.15 does not safely handle custom meta-data during post duplication, storing attacker-supplied serialized values without the WordPress meta API's double-serialization protection, allowing users with Contributor-level access and above to inject a PHP...

CVE-2022-28206

creationtimestamp| type| source ---|---|--- 2026-06-24 07:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moze4zc3pd2n...

CVE-2026-7761 Ultimate Member <= 2.11.4 - Authenticated (Contributor+) Account Takeover via Password Reset Link Disclosure

The Ultimate Member plugin for WordPress is vulnerable to Account Takeover via Password Reset Link Disclosure in all versions up to and including 2.11.4. This is due to a chain of three logic bugs: 1 an MD5 hash fallback in getdirectorybyhash that allows any post to be used as a member directory ...

CVE-2026-12849

creationtimestamp| type| source ---|---|--- 2026-06-24 06:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozbycv5rt25...

CVE-2026-10749

The Post Duplicator WordPress plugin before 3.0.15 does not safely handle custom meta-data during post duplication, storing attacker-supplied serialized values without the WordPress meta API's double-serialization protection, allowing users with Contributor-level access and above to inject a PHP...

EUVD-2026-38694

The Post Duplicator WordPress plugin before 3.0.15 does not safely handle custom meta-data during post duplication, storing attacker-supplied serialized values without the WordPress meta API's double-serialization protection, allowing users with Contributor-level access and above to inject a PHP...

CVE-2026-10749

CVE-2026-10749 affects the Post Duplicator WordPress plugin (pre-3.0.15). The vulnerability arises from improper handling of custom metadata during post duplication, storing attacker-supplied serialized values without the WordPress meta API double-serialization protection, enabling PHP Object inj...

CVE-2026-10749 Post Duplicator < 3.0.15 - Contributor+ PHP Object Injection via customMetaData

The Post Duplicator WordPress plugin before 3.0.15 does not safely handle custom meta-data during post duplication, storing attacker-supplied serialized values without the WordPress meta API's double-serialization protection, allowing users with Contributor-level access and above to inject a PHP...