CVE-2026-39482

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PublishPress Post Expirator post-expirator allows DOM-Based XSS.This issue affects Post Expirator: from n/a through = 4.9.4...

CVE-2026-5207

The LifterLMS plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 9.2.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2026-40040

creationtimestamp| type| source ---|---|--- 2026-04-13 19:22:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjflocwdbf2s 2026-04-13 20:31:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfpjenntu2m 2026-04-13 21:22:40+00:00| seen|...

CVE-2026-40038

Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into POST parameters. Attackers can inject scripts through the value, commentbody, articlecontent, description, and message parameters...

CVE-2026-6202 code-projects Easy Blog Site post.php sql injection

A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file post.php. Performing a manipulation of the argument tags results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be use...

CVE-2026-6202

The vulnerability CVE-2026-6202 affects code-projects Easy Blog Site 1.0. It targets the file post.php, where manipulation of the tags argument leads to a SQL injection via an unknown function. The attack can be initiated remotely, and the exploit has been released publicly. No remediation detail...

CVE-2026-6202 code-projects Easy Blog Site post.php sql injection

A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file post.php. Performing a manipulation of the argument tags results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be use...

CVE-2026-6202

A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file post.php. Performing a manipulation of the argument tags results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be use...

CVE-2026-6194

creationtimestamp| type| source ---|---|--- 2026-04-13 18:17:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfhzlygy22h 2026-04-13 19:19:04+00:00| published-proof-of-concept| Telegram/61DYlWTca6IkcTFpN2RYBtwr9MKXFEKysLP63-1xRoUERI 2026-04-13 20:18:53+00:00| seen|...

CVE-2026-36943

creationtimestamp| type| source ---|---|--- 2026-04-13 18:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfhwnnqom2z...

CVE-2026-40038

CVE-2026-40038 affects Pachno 1.0.6, with a stored cross-site scripting (XSS) vulnerability. The issue arises from improper sanitization when user input is retrieved via Request::getRawParameter() or Request::getParameter(), allowing the injection of HTML/Script payloads into POST parameters acro...

CVE-2026-40038

Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into POST parameters. Attackers can inject scripts through the value, commentbody, articlecontent, description, and message parameters...

CVE-2026-40038 Pachno 1.0.6 Stored Cross-Site Scripting via Multiple Parameters

Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into POST parameters. Attackers can inject scripts through the value, commentbody, articlecontent, description, and message parameters...

CVE-2026-31282

creationtimestamp| type| source ---|---|--- 2026-04-13 18:08:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfhiowp6h2g...

CVE-2026-30811

creationtimestamp| type| source ---|---|--- 2026-04-13 18:01:48+00:00| seen| Telegram/xbHjqaTQcr8Rt4XSFJk3i5MS3FsWolyHvBAsREEApmBgOgk 2026-04-13 18:18:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfi2s43h22m...

CVE-2026-30809

creationtimestamp| type| source ---|---|--- 2026-04-13 18:01:48+00:00| seen| Telegram/xbHjqaTQcr8Rt4XSFJk3i5MS3FsWolyHvBAsREEApmBgOgk 2026-04-13 18:26:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfijk4raz2z...

CVE-2026-30813

creationtimestamp| type| source ---|---|--- 2026-04-13 18:01:48+00:00| seen| Telegram/xbHjqaTQcr8Rt4XSFJk3i5MS3FsWolyHvBAsREEApmBgOgk 2026-04-13 18:42:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfjgujuvv2z...

CVE-2026-30804

creationtimestamp| type| source ---|---|--- 2026-04-13 18:01:43+00:00| seen| Telegram/mgx4OESgILIX0WlIlJJnUrKrutJBiy7rqG6NL0bWgANWmeU 2026-04-13 18:20:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfi7bk2e52m...

CVE-2026-6182

creationtimestamp| type| source ---|---|--- 2026-04-13 18:01:43+00:00| seen| Telegram/mgx4OESgILIX0WlIlJJnUrKrutJBiy7rqG6NL0bWgANWmeU 2026-04-13 18:57:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfkbpydvk2m...

CVE-2026-40910

creationtimestamp| type| source ---|---|--- 2026-04-13 17:39:32+00:00| published-proof-of-concept| https://github.com/fatedier/frp/security/advisories/GHSA-pq96-pwvg-vrr9 2026-04-21 22:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjzzxgpgw32i...