Mastodon security vulnerabilities

Mastodon is an open-source social networking server based on ActivityPub. Mastodon has a security vulnerability, which stems from a logical error that allows old posts of suspended users to appear on the timeline. In certain versions, this suspension mechanism may be partially bypassed...

PT-2026-4194

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through = 1.0.4.2...

CVE-2026-21983

creationtimestamp| type| source ---|---|--- 2026-01-20 22:38:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcv7v2gw4k2r 2026-01-20 23:06:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcvbipbrv72h 2026-01-21 07:50:48+00:00| seen|...

CVE-2026-21990

creationtimestamp| type| source ---|---|--- 2026-01-20 22:37:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcv7unba2t22 2026-01-20 23:08:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcvblox7dk2t 2026-01-21 07:48:22+00:00| seen|...

CVE-2026-21989

creationtimestamp| type| source ---|---|--- 2026-01-20 22:29:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcv7g74j2h2g 2026-01-20 22:30:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcv7h5smsu27 2026-01-20 22:31:18+00:00| seen|...

CVE-2026-21987

creationtimestamp| type| source ---|---|--- 2026-01-20 22:29:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcv7fqjxbn2g 2026-01-20 22:30:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcv7gnxgcx2g 2026-01-20 23:10:26+00:00| seen|...

CVE-2025-53912

creationtimestamp| type| source ---|---|--- 2026-01-20 16:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcuk75iw7w2c 2026-01-20 16:30:51+00:00| seen| https://infosec.place/objects/7a4b9871-e1dc-42aa-96f2-7d71c4fb4863 2026-01-20 17:12:04+00:00| seen|...

CVE-2026-20061

creationtimestamp| type| source ---|---|--- 2026-01-20 16:02:50+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcujrwmtsc23 2026-01-20 16:05:09+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcujw2nhcc23 2026-04-16 18:00:00+00:00| seen|...

CVE-2026-22844

creationtimestamp| type| source ---|---|--- 2026-01-20 15:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcugcyjeln2o 2026-01-20 15:01:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcugfexr2727 2026-01-20 15:28:41+00:00| seen|...

CVE-2026-23950

creationtimestamp| type| source ---|---|--- 2026-01-19 21:41:54+00:00| published-proof-of-concept| https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w 2026-01-20 02:01:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mct2r3skqa24 2026-01-20...

CVE-2026-23841

creationtimestamp| type| source ---|---|--- 2026-01-19 19:42:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcsfltcedk2k 2026-01-19 19:42:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcsfmiizeu2i 2026-01-19 22:08:08+00:00| seen|...

CVE-2026-23840

creationtimestamp| type| source ---|---|--- 2026-01-19 19:42:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcsfllxkv62w 2026-01-19 19:42:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcsfmapvdc2n 2026-01-19 22:03:07+00:00| seen|...

CVE-2026-0629

creationtimestamp| type| source ---|---|--- 2026-01-19 17:31:10+00:00| seen| https://bsky.app/profile/leekthehack.bsky.social/post/3mcs6b4kq4c24 2026-01-19 17:31:11+00:00| seen| https://bsky.app/profile/leekthehack.bsky.social/post/3mcs6bbwsx224 2026-01-19 22:38:17+00:00| seen|...

CVE-2026-1181

creationtimestamp| type| source ---|---|--- 2026-01-19 13:34:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcrqzvd4jb2n 2026-01-19 13:38:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcrrax7d452v...

CVE-2026-1138

creationtimestamp| type| source ---|---|--- 2026-01-19 06:03:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcqxtdxnou2i 2026-01-19 07:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcr365dfth2v...

CVE-2026-0863

creationtimestamp| type| source ---|---|--- 2026-01-18 16:51:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcplmarbwo22 2026-01-18 16:52:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcplnbmisz2m 2026-01-18 16:53:03+00:00| seen|...

WordPress AJAX Hits Counter + Popular Posts Widget plugin <= 0.10.210305 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin AJAX Hits Counter + Popular Posts Widget versions = 0.10.210305...

CVE-2025-12129

The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.27 via the /cubewp-posts/v1/query-new and /cubewp-posts/v1/query REST API endpoints due to insufficient restrictions on which posts can be include...

CVE-2025-68121

creationtimestamp| type| source ---|---|--- 2026-01-17 18:48:47+00:00| seen| https://seclists.org/oss-sec/2026/q1/83 2026-01-17 18:51:14+00:00| seen| https://seclists.org/oss-sec/2026/q1/84 2026-01-17 20:13:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mcngeykb6u27 2026-01-...

CVE-2026-21623

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla...