CVE-2026-23863

creationtimestamp| type| source ---|---|--- 2026-05-05 07:11:11+00:00| seen| https://www.acn.gov.it/portale/w/whatsapp-rilevate-vulnerabilita-in-versioni-per-windows-e-ios/android 2026-05-05 13:21:57+00:00| seen| https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3ml4bqcdbab...

CVE-2026-23866

creationtimestamp| type| source ---|---|--- 2026-05-05 07:11:11+00:00| seen| https://www.acn.gov.it/portale/w/whatsapp-rilevate-vulnerabilita-in-versioni-per-windows-e-ios/android 2026-05-05 11:44:26+00:00| seen| https://bsky.app/profile/securestep9.bsky.social/post/3ml44ctvsok2g 2026-05-05...

CVE-2026-3456

creationtimestamp| type| source ---|---|--- 2026-05-05 06:51:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3lxtflxw2p 2026-05-05 19:21:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vulvr5y2z 2026-05-05 19:45:53+00:00| seen|...

CVE-2026-3454 GenerateBlocks <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag Replacements

The GenerateBlocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.0. This is due to missing object-level authorization checks in the /wp-json/generateblocks/v1/dynamic-tag-replacements REST endpoint. The endpoint only verifies that...

CVE-2026-3454

CVE-2026-3454 affects the WordPress plugin GenerateBlocks (versions &lt;= 2.2.0). The vulnerability is an Insecure Direct Object Reference in the REST endpoint /wp-json/generateblocks/v1/dynamic-tag-replacements . The endpoint only checks user capability (edit_posts) and does not verify that the ...

CVE-2026-3454

The GenerateBlocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.0. This is due to missing object-level authorization checks in the /wp-json/generateblocks/v1/dynamic-tag-replacements REST endpoint. The endpoint only verifies that...

CVE-2026-3454 GenerateBlocks <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag Replacements

The GenerateBlocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.0. This is due to missing object-level authorization checks in the /wp-json/generateblocks/v1/dynamic-tag-replacements REST endpoint. The endpoint only verifies that...

CVE-2026-6700

creationtimestamp| type| source ---|---|--- 2026-05-05 06:41:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3lfrenxf2n...

CVE-2026-7810

creationtimestamp| type| source ---|---|--- 2026-05-05 06:36:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3l4eaeoq2q...

EUVD-2026-27213

The ElementsKit Elementor Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the LiveAction::reset function in all versions up to, and including, 3.8.2 The function is hooked to the WordPress init action and triggers when both post...

CVE-2026-6704

creationtimestamp| type| source ---|---|--- 2026-05-05 06:28:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3kncuesy2r 2026-05-06 01:43:16+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3ml5l6sxm7m2u...

CVE-2026-6180 PaperCut MF: Card truncation on HP readers

A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions involving dropped packets and out-of-order sequence counters, the server may incorrectly process fragmented data chunks. If a sequence reset notificatio...

CVE-2026-6180 PaperCut MF: Card truncation on HP readers

A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions involving dropped packets and out-of-order sequence counters, the server may incorrectly process fragmented data chunks. If a sequence reset notificatio...

EUVD-2026-27191

The Schedule Post Changes With PublishPress Future plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wrapper' attribute of the futureaction shortcode in all versions up to, and including, 4.10.0. This is due to insufficient input sanitization on the wrapper attribute. The...

CVE-2026-7782

creationtimestamp| type| source ---|---|--- 2026-05-05 02:57:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml36vb2ozt2k...

CVE-2026-7781

creationtimestamp| type| source ---|---|--- 2026-05-05 02:42:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml362fquus2i...

CVE-2026-7718

A vulnerability was identified in Totolink WA300 5.2cu.7112B20190227. Impacted is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument webWlanIdx leads to command injection. The attack may be initiated remotely. The...

CVE-2026-40197

creationtimestamp| type| source ---|---|--- 2026-05-05 01:30:20+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3ml2zynvoipa2...

CVE-2026-43870

creationtimestamp| type| source ---|---|--- 2026-05-05 00:43:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml2xfsewtz22 2026-05-05 10:49:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3zb4z75s2t...

CVE-2026-43868

creationtimestamp| type| source ---|---|--- 2026-05-05 00:38:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml2x4tl2hn2e 2026-05-05 11:09:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml42dpaud62p...