39881 matches found
CVE-2026-42749 WordPress Disable Comments for Any Post Types (Remove comments) plugin <= 1.3.0 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disable Comments for Any Post Types Remove comments comments-plus allows Password Recovery Exploitation.This issue affects Disable Comments for Any Post Types Remove comments: from n/a through = 1.3.0...
EUVD-2026-32198
Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disable Comments for Any Post Types Remove comments comments-plus allows Password Recovery Exploitation.This issue affects Disable Comments for Any Post Types Remove comments: from n/a through = 1.3.0...
CVE-2026-8143
creationtimestamp| type| source ---|---|--- 2026-05-27 09:38:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmt7kdvw6z2k...
CVE-2026-41009
creationtimestamp| type| source ---|---|--- 2026-05-27 09:22:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmt6mzraeh2k...
CVE-2026-7618
creationtimestamp| type| source ---|---|--- 2026-05-27 09:00:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmt5gecmo52v...
CVE-2026-8832
The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3.5 This is due to the 'wpcode' custom post type being registered without a custom capabilitytype or capability...
CVE-2026-8867
The Post Category Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'postcategorygallery' shortcode in versions up to, and including, 1.0.0. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes such as...
CVE-2026-8832 WPCode <= 2.3.5 - Authenticated (Author+) Remote Code Execution via CPT Capability Bypass via XML-RPC wp.newPost
The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3.5 This is due to the 'wpcode' custom post type being registered without a custom capabilitytype or capability...
CVE-2026-8832
The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3.5 This is due to the 'wpcode' custom post type being registered without a custom capabilitytype or capability...
CVE-2026-8832
The WPCode plugin for WordPress (Insert Headers and Footers + Custom Code Snippets) is vulnerable to Remote Code Execution in versions up to and including 2.3.5. The root cause is that the 'wpcode' custom post type is registered without a proper capability_type or capability restrictions in wpcod...
EUVD-2026-32100
The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3.5 This is due to the 'wpcode' custom post type being registered without a custom capabilitytype or capability...
CVE-2026-44450
creationtimestamp| type| source ---|---|--- 2026-05-27 06:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsteptle52s...
CVE-2026-44449
creationtimestamp| type| source ---|---|--- 2026-05-27 06:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmstehswhn2s...
CVE-2026-44847
creationtimestamp| type| source ---|---|--- 2026-05-27 06:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmstea23hr2r...
CVE-2026-9608
creationtimestamp| type| source ---|---|--- 2026-05-27 05:53:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmssxoqors2i...
CVE-2026-2255
creationtimestamp| type| source ---|---|--- 2026-05-27 05:38:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmss4tg5nw2v...
CVE-2026-8867 Post Categories Gallery <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
The Post Category Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'postcategorygallery' shortcode in versions up to, and including, 1.0.0. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes such as...
EUVD-2026-32095
The Post Category Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'postcategorygallery' shortcode in versions up to, and including, 1.0.0. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes such as...