SUSE CVE-2026-22030

React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, React Router or Remix v2 is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when...

CVE-2025-67147

creationtimestamp| type| source ---|---|--- 2026-01-12 23:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcb5hofhfy2e 2026-01-12 23:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcb5i6gznt2u...

CVE-2025-66802

creationtimestamp| type| source ---|---|--- 2026-01-12 22:17:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcb2yz4ats2c 2026-01-12 22:30:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcb3qdzq7w2e...

CVE-2026-22785

creationtimestamp| type| source ---|---|--- 2026-01-12 20:07:33+00:00| seen| Telegram/H1nFRtyRiOhcROcf0NE40bSu4SNvkoqq4ZeM2FsiV7bGxI 2026-01-12 22:35:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcb3zcir3q2q 2026-01-12 22:40:39+00:00| seen|...

CVE-2026-22776

creationtimestamp| type| source ---|---|--- 2026-01-12 20:07:23+00:00| seen| Telegram/8sAp-VzdCpmBtZpXHcIlhxzqtmWknERFSKz0UU7al4qy2OU 2026-01-12 20:07:33+00:00| seen| Telegram/H1nFRtyRiOhcROcf0NE40bSu4SNvkoqq4ZeM2FsiV7bGxI 2026-01-12 21:43:30+00:00| seen|...

CVE-2026-0840

creationtimestamp| type| source ---|---|--- 2026-01-11 07:26:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc4yqcwrum2u 2026-01-11 07:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc4zlqmxzm2m 2026-01-11 08:00:21+00:00| published-proof-of-concept|...

CVE-2026-0839

creationtimestamp| type| source ---|---|--- 2026-01-11 06:25:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc4vdwnb372t 2026-01-11 06:25:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc4vedkjop2t 2026-01-11 07:00:35+00:00|...

CVE-2025-14976

CVE-2025-14976 : The WordPress plugin “User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder” is affected by Cross-Site Request Forgery due to missing/incorrect nonce validation in process_row_actions f...

CVE-2025-14943 Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.7.2. This is due to a misconfigured authorization check on the 'getShipItemFullText' function which only verifies that a user has the...

CVE-2025-14943

CVE-2025-14943 affects Blog2Social: Social Media Auto Post & Scheduler for WordPress. The vulnerability arises from a misconfigured authorization check in getShipItemFullText: it only verifies Subscriber-level read capability and a valid nonce, but does not confirm access permissions for the spec...

CVE-2025-13457

creationtimestamp| type| source ---|---|--- 2026-01-10 05:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc2a5p4t4g2u 2026-01-10 05:02:58+00:00| published-proof-of-concept| Telegram/UDMk206lgQvLt4zm60yBzpmxh6GeqSRvdRaLpn90JAOiIEo 2026-01-10 05:19:56+00:00| seen|...

CVE-2025-65091

creationtimestamp| type| source ---|---|--- 2026-01-10 05:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc2a4r3gka2b 2026-01-10 05:02:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc2aahpcx527 2026-01-10 05:02:58+00:00|...

CVE-2025-59057

creationtimestamp| type| source ---|---|--- 2026-01-10 03:23:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22opzydx2g 2026-01-10 03:23:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22plsyrs22 2026-01-10 03:25:05+00:00| seen|...

CVE-2026-22595

creationtimestamp| type| source ---|---|--- 2026-01-10 03:22:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22nslknq2t 2026-01-10 03:23:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22ojbnyy2t 2026-01-10 04:02:47+00:00|...

CVE-2026-22594

creationtimestamp| type| source ---|---|--- 2026-01-10 03:22:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22nlkmkt2z 2026-01-10 03:22:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22obo6f52p 2026-01-10 04:02:47+00:00|...

CVE-2026-22030

React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, React Router or Remix v2 is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when...

CVE-2026-22697

creationtimestamp| type| source ---|---|--- 2026-01-10 01:30:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzufwx7vt2v 2026-01-10 01:54:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbzvpoxhg22y 2026-01-10 02:04:17+00:00| published-proof-of-concept|...

CVE-2026-21898

creationtimestamp| type| source ---|---|--- 2026-01-10 01:26:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbzu5dqnhi2q 2026-01-10 01:31:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzug6qgwq2u 2026-01-10 02:04:07+00:00| published-proof-of-concept|...

WordPress plugin Blog2Social 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2025-15500

creationtimestamp| type| source ---|---|--- 2026-01-09 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzlz4zqto2p 2026-01-09 23:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzm2cmv4u2f 2026-01-09 23:02:28+00:00| seen|...