CVE-2025-59057

creationtimestamp| type| source ---|---|--- 2026-01-10 03:23:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22opzydx2g 2026-01-10 03:23:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22plsyrs22 2026-01-10 03:25:05+00:00| seen|...

CVE-2026-22595

creationtimestamp| type| source ---|---|--- 2026-01-10 03:22:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22nslknq2t 2026-01-10 03:23:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22ojbnyy2t 2026-01-10 04:02:47+00:00|...

CVE-2026-22594

creationtimestamp| type| source ---|---|--- 2026-01-10 03:22:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22nlkmkt2z 2026-01-10 03:22:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22obo6f52p 2026-01-10 04:02:47+00:00|...

CVE-2026-22030

React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, React Router or Remix v2 is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when...

CVE-2026-22697

creationtimestamp| type| source ---|---|--- 2026-01-10 01:30:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzufwx7vt2v 2026-01-10 01:54:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbzvpoxhg22y 2026-01-10 02:04:17+00:00| published-proof-of-concept|...

CVE-2026-21898

creationtimestamp| type| source ---|---|--- 2026-01-10 01:26:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbzu5dqnhi2q 2026-01-10 01:31:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzug6qgwq2u 2026-01-10 02:04:07+00:00| published-proof-of-concept|...

WordPress plugin Blog2Social 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2025-15500

creationtimestamp| type| source ---|---|--- 2026-01-09 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzlz4zqto2p 2026-01-09 23:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzm2cmv4u2f 2026-01-09 23:02:28+00:00| seen|...

CVE-2025-67070

creationtimestamp| type| source ---|---|--- 2026-01-09 22:39:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbzktodu6e2r 2026-01-09 23:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzm2s3tka2v 2026-01-09 23:02:37+00:00| seen|...

CVE-2026-0830

creationtimestamp| type| source ---|---|--- 2026-01-09 22:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbziogyzqy2m 2026-01-09 22:07:00+00:00| seen| Telegram/sbBWfdQsy2QnBSyrchCbfVHeoFEwmnGugyfSbtG1Df5cAwQ 2026-01-09 23:49:41+00:00| seen|...

CVE-2025-56425

creationtimestamp| type| source ---|---|--- 2026-01-09 19:58:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzbttdf6v2t 2026-01-09 19:59:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzbupap4v2t...

CVE-2025-67825

creationtimestamp| type| source ---|---|--- 2026-01-09 19:58:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzbtla2jk2v 2026-01-09 19:59:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzbuhkze62u...

CVE-2023-4725

The Simple Posts Ticker WordPress plugin before 1.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-4036

The Simple Blog Card WordPress plugin before 1.32 does not ensure that posts to be displayed via a shortcode are public, allowing any authenticated users, such as subscriber, to retrieve arbitrary post title and their content such as draft, private and password protected ones...

CVE-2017-18585

The posts-in-page plugin before 1.3.0 for WordPress has icaddposts template='../ directory traversal...

CVE-2017-18898

An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows crafted posts that potentially cause a web browser to hang...

CVE-2017-18889

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. An attacker could create fictive system-message posts via webhooks and slash commands, in the v3 or v4 REST API...

CVE-2019-11869

The Yuzo Related Posts plugin 5.12.94 for WordPress has XSS because it mistakenly expects that isadmin verifies that the request comes from an admin user it actually only verifies that the request is for an admin page. An unauthenticated attacker can inject a payload into the plugin settings, suc...

CVE-2019-20887

An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not honor flags API permissions when deciding whether a user can receive intra-team posts...

CVE-2024-39361

Mattermost versions 9.8.0, 9.7.x = 9.7.4, 9.6.x = 9.6.2 and 9.5.x = 9.5.5 fail to prevent users from specifying a RemoteId for their posts which allows an attacker to specify both a remoteId and the post ID, resulting in creating a post with a user-defined post ID. This can cause some broken...