CVE-2026-33010

creationtimestamp| type| source ---|---|--- 2026-03-06 05:49:10+00:00| published-proof-of-concept| https://github.com/doobidoo/mcp-memory-service/security/advisories/GHSA-g9rg-8vq5-mpwm 2026-03-20 20:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjclu7gsp26 2026-03-...

PT-2026-23708

Name of the Vulnerable Software and Affected Versions OOP CMS BLOG version 1.0 Description The software contains SQL injection flaws that permit unauthenticated attackers to execute arbitrary SQL queries through multiple parameters. Attackers can inject SQL commands via the search parameter in...

Zsoft OOP CMS BLOG SQL注入漏洞

Zsoft OOP CMS BLOG is a content management system blog platform developed by Zsoft Company in Bangladesh. Version 1.0 of Zsoft OOP CMS BLOG has a SQL injection vulnerability. This vulnerability stems from issues with the search parameter in search.php, the pageid parameter in page.php, and the id...

CVE-2026-28454

OpenClaw versions prior to 2026.2.2 fail to validate webhook secrets in Telegram webhook mode must be enabled, allowing unauthenticated HTTP POST requests to the webhook endpoint that trust attacker-controlled JSON payloads. Remote attackers can forge Telegram updates by spoofing message.from.id...

CVE-2026-2599

creationtimestamp| type| source ---|---|--- 2026-03-05 13:20:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgcva7lu5a2s 2026-03-05 13:20:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgcvagp2kb2c 2026-03-05 13:58:46+00:00| seen|...

EUVD-2026-9623

Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Posts Carousel Pro: from n/a through = 15.1...

CVE-2026-27361

Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Posts Carousel Pro: from n/a through = 15.1...

CVE-2026-27361 WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Posts Carousel Pro: from n/a through = 15.1...

CVE-2026-27361

CVE-2026-27361 is a missing/broken authorization vulnerability in the WordPress plugin Responsive Posts Carousel Pro (versions up to 15.1). Public data indicates an exploitable misconfiguration of access control, allowing unauthorized access to protected functionality or data. The CVSSv3.1 base s...

CVE-2026-27361 WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Posts Carousel Pro: from n/a through = 15.1...

CVE-2026-29127

creationtimestamp| type| source ---|---|--- 2026-03-05 04:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116174686146308685 2026-03-05 04:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mgbxmtt5zd2e 2026-03-05 05:49:24+00:00| seen|...

PT-2026-23244

Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Posts Carousel Pro: from n/a through = 15.1...

CVE-2026-27803

creationtimestamp| type| source ---|---|--- 2026-03-04 22:17:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgbcruyepi2n 2026-03-04 22:17:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgbcsn66nc2f 2026-03-05 00:06:30+00:00| seen|...

CVE-2026-20049

creationtimestamp| type| source ---|---|--- 2026-03-04 18:29:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavztxq5m2s 2026-03-04 18:29:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaw2sj5as25 2026-03-05 11:03:43+00:00| seen|...

CVE-2026-20100

creationtimestamp| type| source ---|---|--- 2026-03-04 18:29:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavzf6jog2d 2026-03-04 18:29:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaw2cvzun2f 2026-03-05 11:03:43+00:00| seen|...

CVE-2025-70241

creationtimestamp| type| source ---|---|--- 2026-03-04 17:14:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgart6ddyh2t 2026-03-04 17:14:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgartwhijs25...

CVE-2025-62814

creationtimestamp| type| source ---|---|--- 2026-03-04 16:31:53+00:00| seen| https://t.me/cKure/16030 2026-03-04 17:14:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgartff3jl2d 2026-03-04 17:14:36+00:00| seen|...

CVE-2026-27441

creationtimestamp| type| source ---|---|--- 2026-03-04 10:08:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mga22qm65b24 2026-03-04 10:49:54+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3mga4e2k2nk2c 2026-03-04 10:49:55+00:00| seen|...

CVE-2026-2363

The WP-Members Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the 'orderby' attribute of the wpmemusermembershipposts shortcode in all versions up to, and including, 3.5.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-29183

creationtimestamp| type| source ---|---|--- 2026-03-04 03:48:11+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-6865-qjcf-286f 2026-03-06 08:20:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgeuwyjvth2c 2026-03-06...