WordPress plugin Visual Portfolio, Photo Gallery & Post Grid 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

PT-2026-27879

Name of the Vulnerable Software and Affected Versions Post Snippets versions through 4.0.12 Description A code injection issue exists in Post Snippets that could allow for remote code inclusion. The issue is due to improper control of code generation. Recommendations Update Post Snippets to a...

CVE-2026-33418

creationtimestamp| type| source ---|---|--- 2026-03-24 23:15:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtpdlkhlx2c 2026-03-25 11:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhuyxhheum27...

CVE-2026-27784

creationtimestamp| type| source ---|---|--- 2026-03-24 23:02:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtonc4ptz27 2026-03-25 03:00:09+00:00| seen| https://my.f5.com/manage/s/article/K000160366 2026-03-25 14:35:13+00:00| seen|...

CVE-2026-32647

creationtimestamp| type| source ---|---|--- 2026-03-24 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtojbwq6o2m 2026-03-25 03:00:09+00:00| seen| https://my.f5.com/manage/s/article/K000160366 2026-03-25 13:27:30+00:00| seen|...

CVE-2026-33554

creationtimestamp| type| source ---|---|--- 2026-03-24 22:53:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhto4lf4kc2c 2026-05-09 09:25:09+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mlfwdyyhaa22...

CVE-2026-4775

creationtimestamp| type| source ---|---|--- 2026-03-24 22:53:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhto45lnmg2m 2026-03-25 03:00:12+00:00| seen| https://access.redhat.com/security/cve/CVE-2026-4775 2026-04-22 22:14:15+00:00| seen|...

CVE-2026-3912

creationtimestamp| type| source ---|---|--- 2026-03-24 22:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtnm24gdn2g...

CVE-2026-29839

creationtimestamp| type| source ---|---|--- 2026-03-24 22:20:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtmauqcoz27...

CVE-2025-33248

creationtimestamp| type| source ---|---|--- 2026-03-24 22:02:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlasduad2x 2026-03-24 22:06:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtljf7zrq2r 2026-03-24 22:09:34+00:00| seen|...

CVE-2026-24141

creationtimestamp| type| source ---|---|--- 2026-03-24 22:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl5swrys2m 2026-03-24 22:12:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlsjgc2l2o...

CVE-2026-24159

creationtimestamp| type| source ---|---|--- 2026-03-24 22:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl5merbx2t 2026-03-24 22:34:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtn25ai5f2d 2026-03-31 09:40:09+00:00| seen|...

CVE-2025-33247

creationtimestamp| type| source ---|---|--- 2026-03-24 21:56:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtkw3kxpc2g 2026-03-24 22:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlaqo4jf27 2026-03-26 00:20:09+00:00| seen|...

CVE-2026-3889

creationtimestamp| type| source ---|---|--- 2026-03-24 21:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtktfglie24 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325...

CVE-2026-4777

CVE-2026-4777 affects SourceCodester Sales and Inventory System 1.0, specifically the POST Parameter Handler’s file view_supplier.php. The vulnerability arises from manipulating the searchtxt argument, enabling SQL injection. The issue can be exploited remotely and, according to the sources, the ...

GHSA-W5PC-M664-R62V A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution

Summary PinchTab v0.8.3 through v0.8.5 allow arbitrary JavaScript execution through POST /wait and POST /tabs/id/wait when the request uses fn mode, even if security.allowEvaluate is disabled. POST /evaluate correctly enforces the security.allowEvaluate guard, which is disabled by default. Howeve...

EUVD-2026-14962

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands...

CVE-2026-29772

Astro Server Islands vulnerability CVE-2026-29772 affects Astro SSR apps using the Node standalone adapter prior to version 10.0.0. The POST handler buffers the entire request body and parses it as JSON without any size limit, causing JSON.parse() to allocate many V8 objects and produce memory am...

CVE-2026-29772 Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

Astro is a web framework. Prior to version 10.0.0, Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because JSON.parse allocates a V8 heap object for every element in the input, a crafted payload of many small JSON objects achiev...

EUVD-2026-14905

JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting XSS vulnerability in the release function within app/home/c/UserController.php. The application attempts to sanitize input by filtering tags but fails to recursively remove dangerous event handlers in other HTML tags such as onerro...