CVE-2026-21043

creationtimestamp| type| source ---|---|--- 2026-07-10 08:17:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbpjynmsx2t 2026-07-10 09:37:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbtyglqpd2e...

CVE-2026-21055

creationtimestamp| type| source ---|---|--- 2026-07-10 08:14:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbpf4bkvr2l 2026-07-10 09:58:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbv5dstyl2e 2026-07-10 16:56:41+00:00| seen|...

CVE-2026-21041

creationtimestamp| type| source ---|---|--- 2026-07-10 08:08:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqboymq5bl2e 2026-07-10 09:36:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbtxonpzj2e...

CVE-2026-21051

creationtimestamp| type| source ---|---|--- 2026-07-10 08:06:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbouzxitv24 2026-07-10 09:54:54+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqbuxrszlf25 2026-07-10 09:54:54+00:00| seen|...

CVE-2026-21048

creationtimestamp| type| source ---|---|--- 2026-07-10 07:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqboilsa4y27 2026-07-10 09:55:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbuyzhcc62i 2026-07-10 12:46:54+00:00| seen|...

CVE-2026-12123

The All-in-One Video Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.8.5 via the 'vdl' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to arbitrary locatio...

CVE-2026-15321

creationtimestamp| type| source ---|---|--- 2026-07-10 05:42:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgugdthm2a...

CVE-2026-13430

creationtimestamp| type| source ---|---|--- 2026-07-10 05:42:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgtwfjbv27...

CVE-2026-59226

creationtimestamp| type| source ---|---|--- 2026-07-10 05:40:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgr7qezc26...

CVE-2026-12123

The All-in-One Video Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.8.5 via the 'vdl' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to arbitrary locatio...

CVE-2026-12123

CVE-2026-12123 describes a Server-Side Request Forgery in the WordPress plugin All-in-One Video Gallery (versions

CVE-2026-15326

creationtimestamp| type| source ---|---|--- 2026-07-10 05:31:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgaxcpzu2s 2026-07-10 20:04:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcx2kpnag22...

CVE-2026-59221

creationtimestamp| type| source ---|---|--- 2026-07-10 05:30:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbg6yf7g42s...

CVE-2026-15288

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 2.2.1. This is due to the plugin accepting the payment amount directly from user-controlled POST data in the 'createpaymentintent' and...

socket.io: engine.io: Socket.IO: Denial of Service via invalid binary POST requests

A flaw was found in Socket.IO, specifically within the Engine.IO protocol v4 polling transport. An unauthenticated attacker can exploit this vulnerability by sending invalid binary POST requests with a Content-Type of application/octet-stream. This improper handling of requests prevents the HTTP...

CVE-2026-15299

The Animation Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'weatherstyle' and 'movedirection' parameters of the Weather widget in all versions up to, and including, 2.6.3. This is due to insufficient output escaping in the Weather widget's render...

EUVD-2026-42797

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 2.2.1. This is due to the plugin accepting the payment amount directly from user-controlled POST data in the 'createpaymentintent' and...

CVE-2026-13430

The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.13.1 via the importmediafilesecure function. This is due to insufficient file extension validation caused by a trailing-dot filename bypass, where the extension...

CVE-2026-13430 Post Export Import with Media <= 1.13.1 - Authenticated (Administrator+) Arbitrary File Upload via Trailing-Dot Filename Bypass in ZIP Media Import

The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.13.1 via the importmediafilesecure function. This is due to insufficient file extension validation caused by a trailing-dot filename bypass, where the extension...

CVE-2026-13430

The WordPress plugin Post Export Import with Media (versions up to 1.13.1) is vulnerable to Arbitrary File Upload. The root cause is insufficient file extension validation during ZIP import: the extension allow-list check in ajax_import_media_start() uses pathinfo() on the raw ZIP entry name, so ...