CVE-2026-12435

creationtimestamp| type| source ---|---|--- 2026-07-01 09:14:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6imrlpi2l 2026-07-01 11:46:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgzi53ov2b 2026-07-01 13:07:44+00:00| seen|...

CVE-2026-12408

creationtimestamp| type| source ---|---|--- 2026-07-01 09:13:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6i4ugm52b 2026-07-01 11:39:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgndvkxf2b 2026-07-01 12:30:35+00:00| seen|...

CVE-2026-12408

The Slim SEO – A Fast & Automated SEO Plugin For WordPress plugin for WordPress is vulnerable to Unauthorized Private Content Disclosure in all versions up to, and including, 4.9.8 via the /wp-json/slim-seo/meta-tags/ai REST API endpoint. This is due to the endpoint's permissioncallback performin...

CVE-2026-11570

The User Submitted Posts WordPress plugin before 20260608 does not escape a submitted value before outputting it in an admin-configured display template, leading to a Stored Cross-Site Scripting that can be triggered by unauthenticated users when a non-default display option is enabled...

CVE-2026-11570 User Submitted Posts < 20260608 - Unauthenticated Stored XSS via Author Name

The User Submitted Posts WordPress plugin before 20260608 does not escape a submitted value before outputting it in an admin-configured display template, leading to a Stored Cross-Site Scripting that can be triggered by unauthenticated users when a non-default display option is enabled...

CVE-2026-11570

The User Submitted Posts WordPress plugin (versions before 20260608 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to escape submitted values before outputting them in an admin-configured display template , specifically involving the Author Name . This flaw can...

CVE-2026-11570 User Submitted Posts < 20260608 - Unauthenticated Stored XSS via Author Name

The User Submitted Posts WordPress plugin before 20260608 does not escape a submitted value before outputting it in an admin-configured display template, leading to a Stored Cross-Site Scripting that can be triggered by unauthenticated users when a non-default display option is enabled...

CVE-2026-57995

creationtimestamp| type| source ---|---|--- 2026-07-01 03:27:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkl57ndiv2d 2026-07-01 22:01:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjf7tzov2i 2026-07-01 22:01:50+00:00| seen|...

CVE-2026-56700

creationtimestamp| type| source ---|---|--- 2026-07-01 03:22:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkkub6hnp2b 2026-07-02 06:09:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnemx25mb2y...

CVE-2026-55721

creationtimestamp| type| source ---|---|--- 2026-07-01 02:37:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-06 2026-07-01 03:17:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkklcpixp24 2026-07-02 06:25:17+00:00| seen|...

CVE-2026-57963

creationtimestamp| type| source ---|---|--- 2026-07-01 02:34:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpki6eycas2k 2026-07-02 13:50:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fgchve2i 2026-07-09 04:45:03+00:00| seen|...

CVE-2026-54903

creationtimestamp| type| source ---|---|--- 2026-07-01 02:33:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpki3ots7t24 2026-07-01 22:02:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjgpngw626 2026-07-02 01:17:01+00:00| seen|...

CVE-2026-56415

creationtimestamp| type| source ---|---|--- 2026-07-01 02:26:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhptlyfo2i 2026-07-01 02:36:58+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-06 2026-07-01 22:03:22+00:00| seen|...

CVE-2026-54902

creationtimestamp| type| source ---|---|--- 2026-07-01 02:22:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhhy5agn2k 2026-07-02 01:13:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu3sylg62b...

CVE-2026-54897

creationtimestamp| type| source ---|---|--- 2026-07-01 02:10:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkgsi5gey2v 2026-07-01 21:55:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmizrwebj2o 2026-07-02 01:14:03+00:00| seen|...

CVE-2026-54896

creationtimestamp| type| source ---|---|--- 2026-07-01 01:55:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkfxmo5vk26 2026-07-01 22:02:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjfxrnov2i 2026-07-02 01:16:16+00:00| seen|...

CVE-2026-50110

creationtimestamp| type| source ---|---|--- 2026-07-01 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpk7kukqzx2v 2026-07-01 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116841777496408584 2026-07-01 02:31:46+00:00| seen|...

PT-2026-54922

Name of the Vulnerable Software and Affected Versions NodeBB affected versions not specified Description NodeBB fails to bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. While the inbound middleware verifies the HTTP-signature actor and the origin of the...

CVE-2026-11570: Undefined Security Weakness

The User Submitted Posts WordPress plugin before 20260608 does not escape a submitted value before outputting it in an admin-configured display template, leading to a Stored Cross-Site Scripting that can be triggered by unauthenticated users when a non-default display option is enabled...

CVE-2026-58593: Insufficient Verification of Data Authenticity

NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. The inbound middleware verifies the HTTP-signature actor and checks the origin of object.id, but never validates that attributedTo corresponds to the sender. In the object mock, attributedT...