CVE-2026-8853

creationtimestamp| type| source ---|---|--- 2026-06-10 11:36:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwmo3qbcp27 2026-06-10 21:16:45+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnxn3fbuoc2o 2026-06-11 02:23:34+00:00| seen|...

CVE-2026-9019

creationtimestamp| type| source ---|---|--- 2026-06-10 11:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwmf5ckts2r 2026-06-10 18:04:38+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mnxcdurote2a...

GHSA-P58X-R3C9-X9P6

creationtimestamp| type| source ---|---|--- 2026-06-10 11:30:53+00:00| seen| https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mnwmdrqrxc2q 2026-06-10 12:04:33+00:00| seen| https://bsky.app/profile/betterhn20.e-work.xyz/post/3mnwo7xvt7d2u 2026-06-11 01:43:14+00:00| seen|...

CVE-2026-8613

creationtimestamp| type| source ---|---|--- 2026-06-10 11:26:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwm46rmfh2v 2026-06-11 02:54:23+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mny7x5cvs52w...

CVE-2026-11852

creationtimestamp| type| source ---|---|--- 2026-06-10 11:00:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwkmx4jsw2r...

CVE-2026-9060

creationtimestamp| type| source ---|---|--- 2026-06-10 10:57:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwkhks5y62p...

CVE-2026-10846

creationtimestamp| type| source ---|---|--- 2026-06-10 09:21:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwf53vrkt2m 2026-06-10 13:22:16+00:00| seen| https://social.nlnetlabs.nl/users/nlnetlabs/statuses/116726018811865481 2026-06-19 18:17:15+00:00| seen|...

CVE-2026-47906

creationtimestamp| type| source ---|---|--- 2026-06-10 09:06:07+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnweavss3g27 2026-06-12 00:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mo2h2xtdbn2o...

CVE-2026-9662

The Recover Exit For WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to and including 1.0.3. This is due to insufficient validation and sanitization of the user-controlled tpf POST parameter before it is used in an include path in the recoverexit function...

CVE-2026-8365

The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksymeta' REST API field and the V200 database migration in versions up to and including 2.1.35. This is due to insufficient input sanitization in the blocksysanitizepostmetaoptions...

CVE-2025-8444

creationtimestamp| type| source ---|---|--- 2026-06-10 08:36:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwcmlm4e42l 2026-06-10 18:16:30+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnxcz3qmg42s...

GHSA-62WX-5F55-W8G2

creationtimestamp| type| source ---|---|--- 2026-06-10 08:20:23+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mnwbp5imih22...

CVE-2026-9019

The Easy Image Collage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gridpropertiesborderColor' and 'gridimagesNattachmenturl' Parameters in all versions up to, and including, 1.13.6 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-47921

creationtimestamp| type| source ---|---|--- 2026-06-10 08:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwalzqkz62p 2026-06-10 14:14:55+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnwvj2vwsu2k...

CVE-2026-47952

creationtimestamp| type| source ---|---|--- 2026-06-10 08:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwalsmozx2v...

EUVD-2026-35995

The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'memo' parameter in all versions up to, and including, 5.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access and above,...

CVE-2026-8853 MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameter

The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'memo' parameter in all versions up to, and including, 5.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access and above,...

CVE-2026-53435

creationtimestamp| type| source ---|---|--- 2026-06-10 07:43:47+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-nuove-vulnerabilita-in-jenkins-1 2026-06-12 21:00:04+00:00| published-proof-of-concept| Telegram/8OrsKfIYkEk0-8uPkb8MstgNwn2ZcQVuOnxP5IJIO77AEwY 2026-06-15 12:35:16+00:00| seen|...

EUVD-2026-35993

The Easy Image Collage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gridpropertiesborderColor' and 'gridimagesNattachmenturl' Parameters in all versions up to, and including, 1.13.6 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2025-62851

creationtimestamp| type| source ---|---|--- 2026-06-10 05:49:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvzblb5bo2v 2026-06-17 12:00:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j 2026-06-18 03:38:08+00:00| seen|...