CVE-2026-12940

creationtimestamp| type| source ---|---|--- 2026-07-30 17:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruz2zcjdt2z 2026-07-30 18:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mruzhq4nk622 2026-07-30 18:50:13+00:00| seen|...

CVE-2026-58066

creationtimestamp| type| source ---|---|--- 2026-07-30 07:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtujmg3ak2a 2026-07-30 07:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtukzihe22w 2026-07-30 07:10:21+00:00| seen|...

CVE-2026-58046

creationtimestamp| type| source ---|---|--- 2026-07-30 07:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtujl5bc42j 2026-07-30 07:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtukscvpt22 2026-07-30 07:08:22+00:00| seen|...

CVE-2026-14305

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...

CVE-2026-14305 WP Delicious < 1.10.2 - Unauthenticated Arbitrary Post Meta Update via recipe_likes

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...

EUVD-2026-51015

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...

CVE-2026-14305

CVE-2026-14305 affects the WP Delicious WordPress plugin (before 1.10.2). The root cause is missing authorization for a specific AJAX action, permitting unauthenticated users to modify limited post metadata (a like counter and an associated identifier list) on arbitrary posts. This can inflate th...

CVE-2026-14231 LifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_posts

The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing any authenticated user with subscriber-level access to read the titles of internal post types such as coupon codes by...

CVE-2026-15975

creationtimestamp| type| source ---|---|--- 2026-07-30 04:45:25+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 05:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtnuxzugp2q 2026-07-30 14:15:31+00:00| seen|...

CVE-2026-67432

creationtimestamp| type| source ---|---|--- 2026-07-29 20:57:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsstprxqw2i 2026-07-29 21:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrsszcbcnl22 2026-07-30 16:35:23+00:00| published-proof-of-concept|...

CVE-2026-8338

creationtimestamp| type| source ---|---|--- 2026-07-29 17:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsibe4vxy2v 2026-07-29 18:05:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsjarkuic27...

CVE-2026-65890

creationtimestamp| type| source ---|---|--- 2026-07-29 14:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrs5giyvju2e 2026-07-29 14:59:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs6ukdypn2q 2026-08-06 08:37:07+00:00| seen|...

CVE-2026-9177

creationtimestamp| type| source ---|---|--- 2026-07-29 14:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrs5cvb4ox2y 2026-07-29 15:03:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs73bdmgs2i...

CVE-2021-29490

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/3927 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/4060 2026-07-29 12:00:58+00:00| seen| https://t.me/CVEhub/3440 2026-07-29 12:01:01+00:00| seen| https://t.me/CVEhub/2139 2026-07-29...

CVE-2026-47876

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrruttu6fz24 2026-07-29 12:13:55+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrrvltod7t2w 2026-07-29 12:13:58+00:00| seen|...

CVE-2023-25292

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:29+00:00| seen| https://t.me/CVEhub/13731 2026-07-29 12:00:35+00:00| seen| https://t.me/CVEhub/11565 2026-07-30 00:00:52+00:00| seen| https://t.me/CVEhub/13731 2026-07-30 01:00:41+00:00| seen| https://t.me/CVEhub/11565 2026-07-31...

CVE-2023-28178

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:26+00:00| seen| https://t.me/CVEhub/14465 2026-07-29 12:00:26+00:00| seen| https://t.me/CVEhub/14467 2026-07-30 00:00:48+00:00| seen| https://t.me/CVEhub/14465 2026-07-30 01:00:33+00:00| seen| https://t.me/CVEhub/14467 2026-07-31...

CVE-2026-58154

creationtimestamp| type| source ---|---|--- 2026-07-29 10:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrokt44tz2r 2026-07-29 11:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrt2y3gqf27 2026-07-30 16:34:04+00:00| seen|...

EUVD-2026-50274

The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the templateredirect dispatcher in the MB Frontend Submission extension in versions up to, and including, 3.8.0. This is due to the handlerequest function routing the mbfsdelete action without any capability or...

CVE-2026-14488 Meta Box AIO <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'rwmb_frontend_field_object_id' Parameter

The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the templateredirect dispatcher in the MB Frontend Submission extension in versions up to, and including, 3.8.0. This is due to the handlerequest function routing the mbfsdelete action without any capability or...