40356 matches found
CVE-2025-7389
creationtimestamp| type| source ---|---|--- 2026-04-14 15:16:42+00:00| seen| Telegram/r8zsFd86IdjBnjQsnpVbmSTohShaGtmjBjBqVT1IiFRWlNI 2026-04-14 16:59:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhu5asmnt2m...
CVE-2026-2404
CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /jsecurity check request payload...
CVE-2026-2404
CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /jsecurity check request payload...
CVE-2026-2449
creationtimestamp| type| source ---|---|--- 2026-04-14 12:48:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhg3rxp4d2m 2026-04-14 13:15:45+00:00| published-proof-of-concept| Telegram/cLVBfu0wN-KDy7vSZP2Uw7mBDsIGZ8mzZODmv4ph0BNeQs...
CVE-2026-33116
creationtimestamp| type| source ---|---|--- 2026-04-14 12:18:58+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0114 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 19:17:10+00:00| seen|...
GHSA-R4Q5-VMMM-2653
creationtimestamp| type| source ---|---|--- 2026-04-14 12:01:09+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mjhdhgn23o2t 2026-04-20 01:05:19+00:00| seen| https://gist.github.com/konard/dc529ad3e07305daab99c78bc17d7ea6 2026-04-24 12:00:56+00:00| seen|...
CVE-2026-32201
creationtimestamp| type| source ---|---|--- 2026-04-14 11:51:20+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-april-2026-monthly-rollup-av26-352 2026-04-14 12:20:56+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0116 2026-04-14 15:49:19+00:00|...
WordPress WP Responsive Recent Post Slider/Carousel plugin <= 3.7.1 - Backdoor vulnerability
Backdoor vulnerability discovered by ? in WordPress Plugin WP Responsive Recent Post Slider/Carousel versions = 3.7.1...
WordPress Post grid and filter ultimate plugin <= 1.7.4 - Backdoor vulnerability
Backdoor vulnerability discovered by ? in WordPress Plugin Post grid and filter ultimate versions = 1.7.4...
WordPress Trending/Popular Post Slider and Widget plugin <= 1.8.6 - Backdoor vulnerability
Backdoor vulnerability discovered by ? in WordPress Plugin Trending/Popular Post Slider and Widget versions = 1.8.6...
WordPress Featured Post Creative plugin <= 1.5.7 - Backdoor vulnerability
Backdoor vulnerability discovered by ? in WordPress Plugin Featured Post Creative versions = 1.5.7...
WordPress Post Ticker Ultimate plugin <= 1.7.6 - Backdoor vulnerability
Backdoor vulnerability discovered by ? in WordPress Plugin Post Ticker Ultimate versions = 1.7.6...
CVE-2026-40261
creationtimestamp| type| source ---|---|--- 2026-04-14 10:06:19+00:00| seen| https://bsky.app/profile/packagist.com/post/3mjh4zxgvfk2v 2026-04-14 16:04:53+00:00| seen| https://t.me/thehackernews/8803 2026-04-15 00:48:18+00:00| seen|...
CVE-2026-2582
creationtimestamp| type| source ---|---|--- 2026-04-14 07:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjguzxabl22t...
CVE-2026-3017 Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts <= 3.0.12 - Authenticated (Administrator+) PHP Object Injection
The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.12 via deserialization of untrusted input in the importshortcodes function. This makes it possible for authenticate...
CVE-2026-3017
The CVE-2026-3017 entry concerns the WordPress plugin Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts, affected up to version 3.0.12. The vulnerability is a PHP Object Injection via deserialization of untrusted input in the import_shortcodes() function. With Administr...
CVE-2026-3017 Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts <= 3.0.12 - Authenticated (Administrator+) PHP Object Injection
The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.12 via deserialization of untrusted input in the importshortcodes function. This makes it possible for authenticate...
CVE-2026-39420
creationtimestamp| type| source ---|---|--- 2026-04-14 04:59:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjglvcscru2m...
CVE-2026-34984
creationtimestamp| type| source ---|---|--- 2026-04-14 04:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgldfq6c62g 2026-04-14 05:17:21+00:00| seen| Telegram/VN5qpdZvC1XQa0kocwrxs34zDP5KgO9HhvqtOghSHVfgqA...