CVE-2026-4896

The CVE-2026-4896 entry concerns the WCFM – Frontend Manager for WooCommerce plugin with the Bookings Subscription Listings Compatible extension for WordPress, affected up to version 6.7.25. The vulnerability is an Insecure Direct Object Reference (IDOR) affecting authenticated users with Vendor-...

CVE-2026-34778

creationtimestamp| type| source ---|---|--- 2026-04-04 05:45:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minjtetwo72o...

CVE-2026-34776

creationtimestamp| type| source ---|---|--- 2026-04-04 05:24:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minin3cmxs2i...

CVE-2026-34775

creationtimestamp| type| source ---|---|--- 2026-04-04 05:21:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minihpc62725...

CVE-2026-2924

creationtimestamp| type| source ---|---|--- 2026-04-04 04:16:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minesxcsib2i 2026-04-10 12:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj5d7km35x2y...

CVE-2026-34770

creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:49+00:00| seen| Telegram/Wq2MikHHjaMT3QcZYic1EqOjYlzbZBeR3fuLUZ6lQSb49CA 2026-04-04 05:35:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minjbhz2rp2o...

CVE-2026-34771

creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:49+00:00| seen| Telegram/Wq2MikHHjaMT3QcZYic1EqOjYlzbZBeR3fuLUZ6lQSb49CA 2026-04-04 02:23:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3min6irxxor2r 2026-04-04 05:16:19+00:00| seen|...

CVE-2026-33184

creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc 2026-04-04 03:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3minano6eba2s 2026-04-14 02:07:07+00:00| seen|...

CVE-2026-34061

creationtimestamp| type| source ---|---|--- 2026-04-04 00:15:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimxfbyfnk2o...

CVE-2026-34229

creationtimestamp| type| source ---|---|--- 2026-04-04 00:09:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimwzpv5eq2i...

CVE-2026-34788

creationtimestamp| type| source ---|---|--- 2026-04-04 00:02:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimwnemipo2j...

PT-2026-30367

MyBB Like Plugin 3.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating posts or threads with unvalidated subject content. Attackers can craft post subjects containing script tags that execute when other users view the attacker's profile,...

MyBB Like Plugin 跨站脚本漏洞

MyBB Like Plugin is an extension for forums developed by MyBB Corporation. Version 3.0.0 of MyBB Like Plugin contains a cross-site scripting vulnerability. This vulnerability arises from the lack of validation of topic content when posts or topics are created, which may allow attackers to inject...

CVE-2016-15058

creationtimestamp| type| source ---|---|--- 2026-04-03 23:25:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimulfblib2t 2026-04-04 01:30:17+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3min3k5xk2c2q...

CVE-2026-27834

creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:15+00:00| published-proof-of-concept| Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw 2026-04-10 10:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj537tvftz2w...

CVE-2026-5485

creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:08+00:00| seen| Telegram/C4IqkAaofmVuG0ts1zoVr23H-sEIs7UsuvOGOq7uR7BrNw 2026-04-04 04:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mindxbbi2t27 2026-06-14 16:07:09+00:00| seen|...

CVE-2026-22664

creationtimestamp| type| source ---|---|--- 2026-04-03 23:20:47+00:00| seen| Telegram/AcNtumNwDk55YBKt0PcSVxzETqOULILyzC0BNrIIoAU4I 2026-04-04 04:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mindxp3i4l2s 2026-06-17 05:37:07+00:00| seen|...

WordPress WCFM - WooCommerce Frontend Manager plugin <= 6.7.25 - Insecure Direct Object References to Authenticated (Vendor+) Arbitrary Post/Product Manipulation vulnerability

WordPress WCFM - WooCommerce Frontend Manager plugin = 6.7.25 - Insecure Direct Object References to Authenticated Vendor+ Arbitrary Post/Product Manipulation vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os - krei.dev | ogbuilders.io in WordPress Plugin WCFM – Frontend Manager for...

CVE-2026-22661

creationtimestamp| type| source ---|---|--- 2026-04-03 23:11:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimtrsvyy52s 2026-04-03 23:20:47+00:00| seen| Telegram/AcNtumNwDk55YBKt0PcSVxzETqOULILyzC0BNrIIoAU4I 2026-04-04 05:14:35+00:00| seen|...

CVE-2026-34118

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 in the HTTP POST body parsing logic due to missing validation of remaining buffer capacity after dynamic allocation, due to insufficient boundary validation when handling externally supplied HTTP input. An...