GO-2026-4300 Mattermost Server is vulnerable to DoS through maliciously crafted posts in github.com/mattermost/mattermost-server

Mattermost Server is vulnerable to DoS through maliciously crafted posts in github.com/mattermost/mattermost-server...

CVE-2025-13774

creationtimestamp| type| source ---|---|--- 2026-01-13 13:32:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcco56ncaw2o 2026-01-13 13:45:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mccoukujgk2e 2026-01-13 13:45:52+00:00| seen|...

CVE-2025-14001

The WP Duplicate Page plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'duplicateBulkHandle' and 'duplicateBulkHandleHPOS' functions in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with...

CVE-2025-14001 WP Duplicate Page <= 1.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication

The WP Duplicate Page plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'duplicateBulkHandle' and 'duplicateBulkHandleHPOS' functions in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with...

CVE-2025-14001 WP Duplicate Page <= 1.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication

The WP Duplicate Page plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'duplicateBulkHandle' and 'duplicateBulkHandleHPOS' functions in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with...

CVE-2025-41717

creationtimestamp| type| source ---|---|--- 2026-01-13 08:19:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcc4mr5jse2m 2026-01-13 08:19:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcc4n2adui2e 2026-01-13 08:22:14+00:00| seen|...

CVE-2026-0507

creationtimestamp| type| source ---|---|--- 2026-01-13 03:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcbkspx7uq2u 2026-01-13 03:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcbktmnaj22b 2026-01-13 03:02:40+00:00| seen|...

CVE-2026-0506

creationtimestamp| type| source ---|---|--- 2026-01-13 03:00:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcbksigr2o2u 2026-01-13 03:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcbktf4dv72a 2026-01-13 03:02:15+00:00| seen|...

SUSE CVE-2026-22030

React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, React Router or Remix v2 is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when...

CVE-2025-67147

creationtimestamp| type| source ---|---|--- 2026-01-12 23:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcb5hofhfy2e 2026-01-12 23:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcb5i6gznt2u...

CVE-2025-66802

creationtimestamp| type| source ---|---|--- 2026-01-12 22:17:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcb2yz4ats2c 2026-01-12 22:30:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcb3qdzq7w2e...

CVE-2026-22785

creationtimestamp| type| source ---|---|--- 2026-01-12 20:07:33+00:00| seen| Telegram/H1nFRtyRiOhcROcf0NE40bSu4SNvkoqq4ZeM2FsiV7bGxI 2026-01-12 22:35:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcb3zcir3q2q 2026-01-12 22:40:39+00:00| seen|...

CVE-2026-22776

creationtimestamp| type| source ---|---|--- 2026-01-12 20:07:23+00:00| seen| Telegram/8sAp-VzdCpmBtZpXHcIlhxzqtmWknERFSKz0UU7al4qy2OU 2026-01-12 20:07:33+00:00| seen| Telegram/H1nFRtyRiOhcROcf0NE40bSu4SNvkoqq4ZeM2FsiV7bGxI 2026-01-12 21:43:30+00:00| seen|...

CVE-2026-0840

creationtimestamp| type| source ---|---|--- 2026-01-11 07:26:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc4yqcwrum2u 2026-01-11 07:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc4zlqmxzm2m 2026-01-11 08:00:21+00:00| published-proof-of-concept|...

CVE-2026-0839

creationtimestamp| type| source ---|---|--- 2026-01-11 06:25:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc4vdwnb372t 2026-01-11 06:25:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc4vedkjop2t 2026-01-11 07:00:35+00:00|...

CVE-2025-14976

CVE-2025-14976 : The WordPress plugin “User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder” is affected by Cross-Site Request Forgery due to missing/incorrect nonce validation in process_row_actions f...

CVE-2025-14943 Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.7.2. This is due to a misconfigured authorization check on the 'getShipItemFullText' function which only verifies that a user has the...

CVE-2025-14943

CVE-2025-14943 affects Blog2Social: Social Media Auto Post & Scheduler for WordPress. The vulnerability arises from a misconfigured authorization check in getShipItemFullText: it only verifies Subscriber-level read capability and a valid nonce, but does not confirm access permissions for the spec...

CVE-2025-13457

creationtimestamp| type| source ---|---|--- 2026-01-10 05:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc2a5p4t4g2u 2026-01-10 05:02:58+00:00| published-proof-of-concept| Telegram/UDMk206lgQvLt4zm60yBzpmxh6GeqSRvdRaLpn90JAOiIEo 2026-01-10 05:19:56+00:00| seen|...

CVE-2025-65091

creationtimestamp| type| source ---|---|--- 2026-01-10 05:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc2a4r3gka2b 2026-01-10 05:02:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc2aahpcx527 2026-01-10 05:02:58+00:00|...