WordPress plugin Admin Columns 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

CVE-2023-5502

creationtimestamp| type| source ---|---|--- 2026-06-04 23:42:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnish75fes22...

CVE-2026-43985

creationtimestamp| type| source ---|---|--- 2026-06-04 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mniq3kpziq2q...

CVE-2026-5228

creationtimestamp| type| source ---|---|--- 2026-06-04 23:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mniq3d6wvj25...

CVE-2026-42329

creationtimestamp| type| source ---|---|--- 2026-06-04 22:57:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnipvx2imz2h...

CVE-2025-65640

creationtimestamp| type| source ---|---|--- 2026-06-04 22:52:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnipmla46y2x...

CVE-2026-42538

creationtimestamp| type| source ---|---|--- 2026-06-04 22:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnip5nee5r2q...

CVE-2025-67446

creationtimestamp| type| source ---|---|--- 2026-06-04 22:01:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnimr26bvw2p...

From Operating Model to Product: How We Built the ROC for Detection-Speed Remediation

In the first article in this series, we made the case for a prevention-led operating model. This article is about what happened next: the decision to build something that did not exist, and what it took to make it real. Turning an operating model into a product sounds straightforward until you ar...

CVE-2026-20245

creationtimestamp| type| source ---|---|--- 2026-06-04 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1900 2026-06-05 00:01:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnitivx5fd2f 2026-06-05 05:50:00+00:00| seen|...

CVE-2026-48040

creationtimestamp| type| source ---|---|--- 2026-06-04 19:29:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mniecjvsyh2f...

CVE-2026-40898

creationtimestamp| type| source ---|---|--- 2026-06-04 18:50:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnibyxi2f52n...

CVE-2026-28318

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update...

CVE-2019-25745

creationtimestamp| type| source ---|---|--- 2026-06-04 14:49:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhunutpu526 2026-06-04 23:28:00+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mnirmljg7r2d 2026-06-04 23:30:30+00:00| seen|...

CVE-2019-25743

WordPress Soliloquy Lite 2.5.6 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by inserting script tags in the post title field. Attackers can submit POST requests to the post editing endpoint with script payloads in the...

CVE-2019-25744

WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by breaking out of option tags in the posttitle parameter. Attackers can submit crafted POST requests to the post.php endpoint with script payloads...

EUVD-2026-34268

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update...

CVE-2026-28318

SolarWinds Serv-U is affected by an unauthenticated Denial of Service vulnerability triggered by specially crafted POST requests with Content-Encoding: deflate. The issue can crash the Serv-U service, with exploitation observed in reports and advisories. SolarWinds has released a hotfix and mitig...

CVE-2026-10861 MISP post-login open redirect via pre_login_requested_url

An open redirect vulnerability existed in MISP UsersController::routeafterlogin because the value stored in the preloginrequestedurl session key was used as the post-login redirect destination without sufficiently enforcing that it was a local application path. An unauthenticated remote attacker...

CVE-2026-10861 MISP post-login open redirect via pre_login_requested_url

An open redirect vulnerability existed in MISP UsersController::routeafterlogin because the value stored in the preloginrequestedurl session key was used as the post-login redirect destination without sufficiently enforcing that it was a local application path. An unauthenticated remote attacker...