CVE-2026-14315

creationtimestamp| type| source ---|---|--- 2026-08-01 14:34:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzotoz37a2z 2026-08-01 14:34:35+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzou5dfd322 2026-08-01 14:34:36+00:00| seen|...

CVE-2026-15964

creationtimestamp| type| source ---|---|--- 2026-08-01 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrzb7mhn4f2c 2026-08-01 11:00:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzcugznah2n 2026-08-01 18:35:23+00:00| seen|...

EUVD-2026-51762

The Advanced Views – Display Custom Fields ACF, Pods, MetaBox, Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the registerrestroutes. This makes it...

CVE-2026-14839

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14195

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...

CVE-2026-3141

creationtimestamp| type| source ---|---|--- 2026-08-01 06:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrys4r3tmi2j 2026-08-01 06:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrytvecl5v2m 2026-08-01 08:33:11+00:00| seen|...

CVE-2026-14839 Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14839

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14839 Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14839

CVE-2026-14839 affects Mapster WP Maps WordPress plugin (

EUVD-2026-51711

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14195

Summary: CVE-2026-14195 affects the Brizy WordPress plugin prior to 2.8.18. The issue is an authorization check gap on a request handler that returns post content, allowing users with the Contributor role or higher to read arbitrary posts, including private, pending, and draft posts from other us...

EUVD-2026-51704

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...

PT-2026-67051

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-58048

creationtimestamp| type| source ---|---|--- 2026-07-31 17:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxjnjuke42b 2026-07-31 18:00:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jdwwbzeerzdry 2026-08-01 09:22:36+00:00| seen|...

CVE-2026-66360

creationtimestamp| type| source ---|---|--- 2026-07-31 01:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvqvmxm6n2e 2026-07-31 02:06:00+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrvuknfmqh23...

CVE-2026-66418

creationtimestamp| type| source ---|---|--- 2026-07-30 22:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvh22scsy22 2026-07-30 22:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gtwl3xl2iqw3q 2026-07-31 12:42:04+00:00| seen|...

CVE-2026-48499

creationtimestamp| type| source ---|---|--- 2026-07-30 20:23:53+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrvbgw5k5s2c 2026-07-30 20:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvdahgdbl23...

CVE-2026-67594

creationtimestamp| type| source ---|---|--- 2026-07-30 20:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrva7x7eag22 2026-07-30 21:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdib25zu2j...

CVE-2026-66415

creationtimestamp| type| source ---|---|--- 2026-07-30 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrva57i7jh2o 2026-07-30 20:22:29+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrvbe4xv6v2d...