41184 matches found
CVE-2026-22182
creationtimestamp| type| source ---|---|--- 2026-03-18 06:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhctssbx4f2m 2026-07-09 03:00:05+00:00| seen| https://t.me/brutsecurity/2511 2026-07-10 00:00:13+00:00| seen| https://t.me/brutsecurity/2511 2026-07-11 11:00:05+00:00|...
CVE-2026-33487
creationtimestamp| type| source ---|---|--- 2026-03-18 05:40:30+00:00| published-proof-of-concept| https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-479m-364c-43vc 2026-03-26 22:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhym4d5ini2x...
CVE-2026-28521
creationtimestamp| type| source ---|---|--- 2026-03-18 05:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcrlbmro72m...
EUVD-2026-12742
The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpgmzacustomjs’ parameter in all versions up to, and including, 10.0.05 due to insufficient input sanitization and output escaping and missing capability check in the...
CVE-2026-2603
creationtimestamp| type| source ---|---|--- 2026-03-18 02:45:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhchtmnsgb2c...
CVE-2026-2092
creationtimestamp| type| source ---|---|--- 2026-03-18 02:45:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhchte54ry2f...
CVE-2026-28500
creationtimestamp| type| source ---|---|--- 2026-03-18 02:45:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhcht4gsjo25 2026-03-18 21:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mheeyitdpb2h 2026-03-21 20:58:10+00:00| seen|...
WordPress Yoast Duplicate Post plugin <= 4.5 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite vulnerability
Authenticated Contributor+ Missing Authorization to Arbitrary Post Duplication and Overwrite vulnerability discovered by johska in WordPress Plugin Duplicate Post versions = 4.5...
WordPress Royal Addons for Elementor - Addons and Templates Kit for Elementor plugin <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure vulnerability
WordPress Royal Addons for Elementor - Addons and Templates Kit for Elementor plugin = 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure vulnerability discovered by Quốc Huy jtwings - Puramu in WordPress Plugin Royal Elementor Addons versions = 1.7.1049...
CVE-2026-4268
The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpgmzacustomjs’ parameter in all versions up to, and including, 10.0.05 due to insufficient input sanitization and output escaping and missing capability check in the...
DEBIAN-CVE-2026-29056
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint UserInviteController::register accepts all POST parameters and passes them to UserModel::create without filtering out the role field. An attacker who receives an...
CVE-2026-4268 WP Go Maps (formerly WP Google Maps) <= 10.0.05 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings
The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpgmzacustomjs’ parameter in all versions up to, and including, 10.0.05 due to insufficient input sanitization and output escaping and missing capability check in the...
CVE-2026-4268
The CVE relates to WP Go Maps (formerly WP Google Maps) WordPress plugin. All versions up to 10.0.05 are affected by a Stored Cross-Site Scripting vulnerability via the wpgmza_custom_js parameter, caused by insufficient input sanitization/output escaping and a missing capability check in the admi...
CVE-2026-4268 WP Go Maps (formerly WP Google Maps) <= 10.0.05 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings
The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpgmzacustomjs’ parameter in all versions up to, and including, 10.0.05 due to insufficient input sanitization and output escaping and missing capability check in the...
WordPress plugin Post SMTP 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-26072
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘event type’ parameter in all versions up to, and including, 3.8.0 due to insufficient input sanitization and...
CVE-2026-31934
creationtimestamp| type| source ---|---|--- 2026-03-18 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0309/ 2026-03-18 14:15:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhdoeboope2c 2026-03-27 09:25:58+00:00| seen|...
CVE-2026-31937
creationtimestamp| type| source ---|---|--- 2026-03-18 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0309/ 2026-03-18 14:15:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhdoeboope2c 2026-03-27 09:25:58+00:00| seen|...
CVE-2026-31932
creationtimestamp| type| source ---|---|--- 2026-03-18 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0309/ 2026-03-18 14:15:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhdoeboope2c 2026-03-27 09:25:58+00:00| seen|...
CVE-2026-31931
creationtimestamp| type| source ---|---|--- 2026-03-18 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0309/ 2026-03-18 14:15:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhdoeboope2c 2026-03-27 09:25:58+00:00| seen|...