40337 matches found
CVE-2026-6840
creationtimestamp| type| source ---|---|--- 2026-04-22 09:07:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk35ivewhc2o...
CVE-2026-6022
creationtimestamp| type| source ---|---|--- 2026-04-22 09:02:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk357wx4tj2i 2026-04-22 09:15:31+00:00| seen| Telegram/4TzioWDgsVQC8RNZfmkg0C5nwkVRV-bYkkXJoHA6GlOJ-c 2026-04-22 10:21:53+00:00| seen|...
CVE-2026-22746
creationtimestamp| type| source ---|---|--- 2026-04-22 08:43:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk345awimj2n 2026-04-22 12:45:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jnvyvfq2h...
CVE-2026-6839
creationtimestamp| type| source ---|---|--- 2026-04-22 08:35:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33pqrqlk2v...
CVE-2026-41664
creationtimestamp| type| source ---|---|--- 2026-04-22 08:33:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33lvtwi22e...
CVE-2026-41665
creationtimestamp| type| source ---|---|--- 2026-04-22 08:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33id3frp2o...
CVE-2026-22748
creationtimestamp| type| source ---|---|--- 2026-04-22 08:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk336shaxa2p 2026-04-22 12:45:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jnvyvfq2h...
CVE-2026-40542
creationtimestamp| type| source ---|---|--- 2026-04-22 08:24:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk333xsffz2e 2026-04-22 15:24:25+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mk3skbh6ht2h 2026-04-22 17:24:29+00:00| seen|...
CVE-2026-4119 Create DB Tables <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Database Table Creation/Deletion via admin-post.php
The Create DB Tables plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.2.1. The plugin registers adminpost action hooks for creating tables adminpostaddtable and deleting tables adminpostdeletedbtable without implementing any capability checks via...
CVE-2026-4119 Create DB Tables <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Database Table Creation/Deletion via admin-post.php
The Create DB Tables plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.2.1. The plugin registers adminpost action hooks for creating tables adminpostaddtable and deleting tables adminpostdeletedbtable without implementing any capability checks via...
CVE-2026-4119
CVE-2026-4119 affects the WordPress plugin Create DB Tables (versions up to and including 1.2.1). The vulnerability arises from missing capability checks and nonce verification in admin_post hooks for creating and deleting tables, allowing any authenticated user (including Subscribers) to execute...
CVE-2026-4139 mCatFilter <= 0.5.2 - Cross-Site Request Forgery via compute_post() Function
The mCatFilter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.5.2. This is due to the complete absence of nonce verification and capability checks in the computepost function, which processes settings updates. The computepost function is...
CVE-2026-4139
The CVE-2026-4139 case concerns the WordPress mCatFilter plugin (versions
CVE-2026-4088 Switch CTA Box <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Switch CTA Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wppwctabox' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user-supplied post meta values including 'ctaboxbuttonlink',...
CVE-2026-4088
The Switch CTA Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wppwctabox' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user-supplied post meta values including 'ctaboxbuttonlink',...
CVE-2026-40937
creationtimestamp| type| source ---|---|--- 2026-04-22 05:22:56+00:00| published-proof-of-concept| https://github.com/rustfs/rustfs/security/advisories/GHSA-pfcq-4gjr-6gjm 2026-04-22 21:24:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4gnqqvqk2c 2026-04-22...
CVE-2026-6408
creationtimestamp| type| source ---|---|--- 2026-04-22 04:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2p6yhcil2k...
CVE-2026-6833
creationtimestamp| type| source ---|---|--- 2026-04-22 04:36:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2oe56pug2k...
CVE-2026-5398
creationtimestamp| type| source ---|---|--- 2026-04-22 04:26:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2nsadkcu2i 2026-04-22 17:24:29+00:00| seen| Telegram/GWv-rb7UfXBXuTinSPZbLsKECuSpybC90nlKZTm2UKU7Bs 2026-04-22 21:14:47+00:00| seen|...