PT-2026-3225

The Related Posts by Taxonomy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'related posts by tax' shortcode in all versions up to, and including, 2.7.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

PT-2026-3254

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla...

MiracleLinux 4 : firefox-60.8.0-1.0.1.AXS4 (AXSA:2019-3929:04)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3929:04 advisory. Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 CVE-2019-11709 Mozilla: Sandbox escape via installation of malicious language...

WordPress User Submitted Posts plugin <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'uspaccess' Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin User Submitted Posts versions = 20260110...

WordPress Related Posts by Taxonomy plugin <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'related_posts_by_tax' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'relatedpostsbytax' Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Related Posts by Taxonomy versions = 2.7.6...

CVE-2026-1009

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

CVE-2026-1009

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

CVE-2026-1009 Stored Cross-Site Scripting in Altium Live Forum Leading to Cross-Customer Data Exposure

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

CVE-2025-70893

creationtimestamp| type| source ---|---|--- 2026-01-15 22:43:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcinusvxs42m 2026-01-15 22:44:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcinv7lyo32z...

CVE-2026-21907

creationtimestamp| type| source ---|---|--- 2026-01-15 21:41:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcikepwyxf2m 2026-01-15 21:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcikrtdkxq2m...

CVE-2026-23527

creationtimestamp| type| source ---|---|--- 2026-01-15 21:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcii4gs3lp2a 2026-01-15 21:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcii4wjrn22u 2026-01-24 21:24:17+00:00| seen|...

CVE-2026-23520

creationtimestamp| type| source ---|---|--- 2026-01-15 21:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcii4bwuop2v 2026-01-15 21:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcii4oji4w2m 2026-01-19 22:53:00+00:00| seen|...

CVE-2025-36911

creationtimestamp| type| source ---|---|--- 2026-01-15 19:03:55+00:00| seen| https://bsky.app/profile/lalgorisme.bsky.social/post/3mciblg6zac24 2026-01-15 19:03:55+00:00| seen| https://bsky.app/profile/lalgorisme.bsky.social/post/3mciblg6qh224 2026-01-15 19:03:56+00:00| seen|...

CVE-2026-22265

creationtimestamp| type| source ---|---|--- 2026-01-15 17:43:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci5462lsp2u 2026-01-15 17:44:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci564g42y2u...

CVE-2026-23493

creationtimestamp| type| source ---|---|--- 2026-01-15 17:43:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci537dtkx2u 2026-01-15 17:43:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci53xg3ti2g 2026-01-15 18:07:30+00:00| seen|...

WordPress Related Posts Thumbnails Plugin for WordPress plugin <= 4.3.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Carlos Ferreira in WordPress Plugin Related Posts Thumbnails Plugin for WordPress versions = 4.3.2...

CVE-2025-13062

creationtimestamp| type| source ---|---|--- 2026-01-15 14:43:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchsznpigd2g 2026-01-15 14:43:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcht2hipda2e...

CVE-2026-22638

creationtimestamp| type| source ---|---|--- 2026-01-15 14:43:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchszgdjha2z 2026-01-15 14:43:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcht2a7wnb2u 2026-01-15 15:12:34+00:00| seen|...

CVE-2026-22643

creationtimestamp| type| source ---|---|--- 2026-01-15 14:43:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchsz6yior2f 2026-01-15 14:43:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchszz4er322 2026-01-15 15:12:34+00:00| seen|...

CVE-2026-0712

creationtimestamp| type| source ---|---|--- 2026-01-15 13:51:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq5onbx22e 2026-01-15 13:52:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq6hbhlo2a 2026-01-15 15:12:33+00:00| seen|...