CVE-2026-3155

The OneSignal – Web Push Notifications plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 3.8.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2026-3155

The CVE refers to the OneSignal – Web Push Notifications plugin for WordPress, vulnerable to an authorization bypass through versions up to 3.8.0 caused by improper verification of user authorization. This enables authenticated attackers with subscriber-level access and above to delete OneSignal ...

CVE-2025-14868

creationtimestamp| type| source ---|---|--- 2026-04-16 09:16:03+00:00| seen| Telegram/yXoKEH-Nbvx8vVZVETbcb5fnBU2DfxjhcC8NzdaVOFnAe1M 2026-04-16 11:08:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjmbhq6zch2m...

CVE-2026-1620

creationtimestamp| type| source ---|---|--- 2026-04-16 09:16:03+00:00| seen| Telegram/yXoKEH-Nbvx8vVZVETbcb5fnBU2DfxjhcC8NzdaVOFnAe1M 2026-04-16 11:08:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjmbhxfs342q...

CVE-2026-0718 Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.5 - Missing Authorization to Limited Post Meta Modification

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ultpshareCountcallback function in all versions up to, and including, 5.0.5. This makes it possible for...

CVE-2026-0718

The CVE-2026-0718 entry concerns the WordPress plugin Post Grid Gutenberg Blocks for News, Magazines, Blog Websites — PostX . It is affected by a missing capability check in the function ultp_shareCount_callback() , allowing unauthenticated modification of the share_count post meta for any post, ...

CVE-2026-0718 Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.5 - Missing Authorization to Limited Post Meta Modification

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ultpshareCountcallback function in all versions up to, and including, 5.0.5. This makes it possible for...

CVE-2026-0718

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ultpshareCountcallback function in all versions up to, and including, 5.0.5. This makes it possible for...

CVE-2026-3614

creationtimestamp| type| source ---|---|--- 2026-04-16 07:16:22+00:00| seen| Telegram/ka552-TMPwwDPQ6XXmIgm-zQPf0bUpWlq22rsZhpiQLQFI 2026-04-16 13:15:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjmikkstid2l 2026-04-17 18:57:18+00:00| seen|...

WordPress Post Grid Gutenberg Blocks for News, Magazines, Blog Websites - PostX plugin <= 5.0.5 - Missing Authorization to Limited Post Meta Modification vulnerability

WordPress Post Grid Gutenberg Blocks for News, Magazines, Blog Websites - PostX plugin = 5.0.5 - Missing Authorization to Limited Post Meta Modification vulnerability discovered by Mohammad Amin Hajian mamadrce in WordPress Plugin PostX versions = 5.0.5...

CVE-2026-40960

creationtimestamp| type| source ---|---|--- 2026-04-16 02:27:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjledthw5x2r 2026-04-16 05:17:50+00:00| published-proof-of-concept| Telegram/TCjlHJMv9N6S0B2yz3RFhhjLUk96NJtTkRt7NB8H70qfRI 2026-04-16 14:00:47+00:00| seen|...

Exploit for Deserialization of Untrusted Data in Roundcube Webmail

CVE-2025-49113 — Roundcube Post-Auth RCE via PHP Object Deseri...

WordPress plugin Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

PT-2026-33282

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ultp shareCount callback function in all versions up to, and including, 5.0.5. This makes it possible for...

CVE-2026-40186

creationtimestamp| type| source ---|---|--- 2026-04-15 22:27:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkwwrlugp2r 2026-04-16 21:08:29+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-9mrh-v2v3-xpfm...

CVE-2026-6385

creationtimestamp| type| source ---|---|--- 2026-04-15 22:23:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkwp3yky42k...

CVE-2026-40500

creationtimestamp| type| source ---|---|--- 2026-04-15 22:19:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkwif2xh32o...

CVE-2026-1711

creationtimestamp| type| source ---|---|--- 2026-04-15 22:10:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkvy5irjm2o...

CVE-2026-1564

creationtimestamp| type| source ---|---|--- 2026-04-15 22:08:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkvtn2oj62t...

CVE-2026-41267

creationtimestamp| type| source ---|---|--- 2026-04-15 21:42:22+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-48m6-ch88-55mj 2026-04-23 20:30:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6u4qo7zo2t 2026-04-23...