40390 matches found
CVE-2018-25247 MyBB Like Plugin 3.0.0 Cross-Site Scripting via User Profiles
MyBB Like Plugin 3.0.0 contains a stored cross-site scripting vulnerability. Authenticated attackers can inject script payloads into post or thread subjects; when other users view a profile that displays the attacker's liked posts, the unsanitized subject is rendered, executing the script in the...
CVE-2026-3666
creationtimestamp| type| source ---|---|--- 2026-04-04 13:15:35+00:00| seen| Telegram/8qeZbiU7PLPcFV4oPUIOuW2hk5ZEK8QzaRsPtyu7yDSJHM 2026-04-05 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mipgyrs7me2a 2026-04-05 00:00:46+00:00| seen|...
CVE-2026-3309
creationtimestamp| type| source ---|---|--- 2026-04-04 12:23:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mio7zi75se2z 2026-04-11 00:30:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj6lgxzsza2m...
CVE-2026-2936
creationtimestamp| type| source ---|---|--- 2026-04-04 12:08:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mio76kqs2o2d 2026-04-04 13:15:35+00:00| seen| Telegram/8qeZbiU7PLPcFV4oPUIOuW2hk5ZEK8QzaRsPtyu7yDSJHM 2026-04-05 01:30:27+00:00| seen|...
CVE-2026-0626
creationtimestamp| type| source ---|---|--- 2026-04-04 12:00:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mio6q6axow2g 2026-04-11 05:30:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj747gdrqx2u...
CVE-2026-3666
CVE-2026-3666 affects wpForo Forum plugin for WordPress (all versions up to and including 2.4.16). The vulnerability arises from missing validation of file name/path against path traversal sequences, allowing authenticated users with subscriber level access and above to delete arbitrary files on ...
CVE-2026-3666
The wpForo Forum plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 2.4.16. This is due to a missing file name/path validation against path traversal sequences. This makes it possible for authenticated attackers, with subscriber level access and...
GHSA-9JPJ-G8VV-J5MF
creationtimestamp| type| source ---|---|--- 2026-04-04 09:17:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3minvmt3eck62...
CVE-2026-2600
creationtimestamp| type| source ---|---|--- 2026-04-04 08:24:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minsou44wm2i 2026-04-10 18:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj5xdbusez2m 2026-04-20 19:00:15+00:00| published-proof-of-concept|...
CVE-2026-4896 WCFM - WooCommerce Frontend Manager <= 6.7.25 - Insecure Direct Object References to Autenticated (Vendor+) Arbitrary Post/Product Manipulation
The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.25 via multiple AJAX actions including wcfmmodifyorderstatus, deletewcfmarticle,...
CVE-2026-4896 WCFM - WooCommerce Frontend Manager <= 6.7.25 - Insecure Direct Object References to Autenticated (Vendor+) Arbitrary Post/Product Manipulation
The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.25 via multiple AJAX actions including wcfmmodifyorderstatus, deletewcfmarticle,...
CVE-2026-4896
The CVE-2026-4896 entry concerns the WCFM – Frontend Manager for WooCommerce plugin with the Bookings Subscription Listings Compatible extension for WordPress, affected up to version 6.7.25. The vulnerability is an Insecure Direct Object Reference (IDOR) affecting authenticated users with Vendor-...
CVE-2026-34778
creationtimestamp| type| source ---|---|--- 2026-04-04 05:45:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minjtetwo72o...
CVE-2026-34776
creationtimestamp| type| source ---|---|--- 2026-04-04 05:24:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minin3cmxs2i...
CVE-2026-34775
creationtimestamp| type| source ---|---|--- 2026-04-04 05:21:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minihpc62725...
CVE-2026-2924
creationtimestamp| type| source ---|---|--- 2026-04-04 04:16:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minesxcsib2i 2026-04-10 12:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj5d7km35x2y...
CVE-2026-34770
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:49+00:00| seen| Telegram/Wq2MikHHjaMT3QcZYic1EqOjYlzbZBeR3fuLUZ6lQSb49CA 2026-04-04 05:35:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minjbhz2rp2o...
CVE-2026-34771
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:49+00:00| seen| Telegram/Wq2MikHHjaMT3QcZYic1EqOjYlzbZBeR3fuLUZ6lQSb49CA 2026-04-04 02:23:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3min6irxxor2r 2026-04-04 05:16:19+00:00| seen|...
CVE-2026-33184
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc 2026-04-04 03:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3minano6eba2s 2026-04-14 02:07:07+00:00| seen|...