CVE-2025-0186

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-24 07:57:51+00:00| seen| https://ccb.belgium.be/advisories/warning-11-new-vulnerabilities-gitlab-ce-and-ee-editions-patch-immediately...

CVE-2026-6845

creationtimestamp| type| source ---|---|--- 2026-04-22 12:48:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3jthzu5h2e 2026-07-03 17:50:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr4c6aoer2f...

CVE-2026-22752

creationtimestamp| type| source ---|---|--- 2026-04-22 12:45:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jnvyvfq2h 2026-04-22 15:40:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mk3th4so7sa2 2026-07-16...

CVE-2026-22751

creationtimestamp| type| source ---|---|--- 2026-04-22 12:45:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jnvyvfq2h...

CVE-2026-6246

creationtimestamp| type| source ---|---|--- 2026-04-22 12:37:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3j74ii6v2n 2026-04-25 07:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkcjmakig72s...

EUVD-2026-24716

The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's blockid attribute in all versions up to, and including, 1.1.3. This is due to insufficient input sanitization and output escaping combined with a custom unescaping routine that reintroduce...

CVE-2026-6843

creationtimestamp| type| source ---|---|--- 2026-04-22 12:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3iifhw7r2k 2026-06-08 09:52:07+00:00| seen| https://bsky.app/profile/bob.mastodon.me.uk.ap.brid.gy/post/3mnrfv6yvmhg2...

CVE-2026-33260

creationtimestamp| type| source ---|---|--- 2026-04-22 12:13:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3hvqcf4a2c...

CVE-2026-6846

creationtimestamp| type| source ---|---|--- 2026-04-22 11:16:22+00:00| seen| Telegram/sPwjOPhzuGx5b1hPjpY5cTeDX3Wq80JN4ZLbGBscqo84ews 2026-04-22 12:26:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3imagf7c2k 2026-04-22 20:10:22+00:00| seen|...

CVE-2026-1395

The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's blockid attribute in all versions up to, and including, 1.1.3. This is due to insufficient input sanitization and output escaping combined with a custom unescaping routine that reintroduce...

EUVD-2026-24652

The Switch CTA Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wppwctabox' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user-supplied post meta values including 'ctaboxbuttonlink',...

CVE-2026-1395 Gutentools <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Slider Block Attributes

The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's blockid attribute in all versions up to, and including, 1.1.3. This is due to insufficient input sanitization and output escaping combined with a custom unescaping routine that reintroduce...

CVE-2026-1395 Gutentools <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Slider Block Attributes

The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's blockid attribute in all versions up to, and including, 1.1.3. This is due to insufficient input sanitization and output escaping combined with a custom unescaping routine that reintroduce...

CVE-2026-1395

The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's blockid attribute in all versions up to, and including, 1.1.3. This is due to insufficient input sanitization and output escaping combined with a custom unescaping routine that reintroduce...

CVE-2026-1395

The CVE-2026-1395 entry concerns the Gutentools WordPress plugin. Affected: Gutentools Post Slider block (block_id attribute) in all versions up to and including 1.1.3. Root cause: insufficient input sanitization and output escaping combined with a custom unescaping routine that reintroduces dang...

CVE-2026-41666

creationtimestamp| type| source ---|---|--- 2026-04-22 09:22:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk36dqogt72r...

CVE-2026-40448

creationtimestamp| type| source ---|---|--- 2026-04-22 09:17:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk362sawcr2k...

CVE-2026-4139

The mCatFilter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.5.2. This is due to the complete absence of nonce verification and capability checks in the computepost function, which processes settings updates. The computepost function is...

CVE-2026-4119

The Create DB Tables plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.2.1. The plugin registers adminpost action hooks for creating tables adminpostaddtable and deleting tables adminpostdeletedbtable without implementing any capability checks via...

CVE-2026-4088

The Switch CTA Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wppwctabox' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user-supplied post meta values including 'ctaboxbuttonlink',...