CVE-2025-53912

creationtimestamp| type| source ---|---|--- 2026-01-20 16:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcuk75iw7w2c 2026-01-20 16:30:51+00:00| seen| https://infosec.place/objects/7a4b9871-e1dc-42aa-96f2-7d71c4fb4863 2026-01-20 17:12:04+00:00| seen|...

CVE-2026-20061

creationtimestamp| type| source ---|---|--- 2026-01-20 16:02:50+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcujrwmtsc23 2026-01-20 16:05:09+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcujw2nhcc23 2026-04-16 18:00:00+00:00| seen|...

CVE-2026-22844

creationtimestamp| type| source ---|---|--- 2026-01-20 15:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcugcyjeln2o 2026-01-20 15:01:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcugfexr2727 2026-01-20 15:28:41+00:00| seen|...

CVE-2026-23950

creationtimestamp| type| source ---|---|--- 2026-01-19 21:41:54+00:00| published-proof-of-concept| https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w 2026-01-20 02:01:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mct2r3skqa24 2026-01-20...

CVE-2026-23841

creationtimestamp| type| source ---|---|--- 2026-01-19 19:42:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcsfltcedk2k 2026-01-19 19:42:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcsfmiizeu2i 2026-01-19 22:08:08+00:00| seen|...

CVE-2026-23840

creationtimestamp| type| source ---|---|--- 2026-01-19 19:42:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcsfllxkv62w 2026-01-19 19:42:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcsfmapvdc2n 2026-01-19 22:03:07+00:00| seen|...

CVE-2026-0629

creationtimestamp| type| source ---|---|--- 2026-01-19 17:31:10+00:00| seen| https://bsky.app/profile/leekthehack.bsky.social/post/3mcs6b4kq4c24 2026-01-19 17:31:11+00:00| seen| https://bsky.app/profile/leekthehack.bsky.social/post/3mcs6bbwsx224 2026-01-19 22:38:17+00:00| seen|...

CVE-2026-1181

creationtimestamp| type| source ---|---|--- 2026-01-19 13:34:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcrqzvd4jb2n 2026-01-19 13:38:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcrrax7d452v...

CVE-2026-1138

creationtimestamp| type| source ---|---|--- 2026-01-19 06:03:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcqxtdxnou2i 2026-01-19 07:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcr365dfth2v...

CVE-2026-0863

creationtimestamp| type| source ---|---|--- 2026-01-18 16:51:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcplmarbwo22 2026-01-18 16:52:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcplnbmisz2m 2026-01-18 16:53:03+00:00| seen|...

WordPress AJAX Hits Counter + Popular Posts Widget plugin <= 0.10.210305 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin AJAX Hits Counter + Popular Posts Widget versions = 0.10.210305...

CVE-2025-12129

The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.27 via the /cubewp-posts/v1/query-new and /cubewp-posts/v1/query REST API endpoints due to insufficient restrictions on which posts can be include...

CVE-2025-68121

creationtimestamp| type| source ---|---|--- 2026-01-17 18:48:47+00:00| seen| https://seclists.org/oss-sec/2026/q1/83 2026-01-17 18:51:14+00:00| seen| https://seclists.org/oss-sec/2026/q1/84 2026-01-17 20:13:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mcngeykb6u27 2026-01-...

CVE-2026-21623

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla...

CVE-2025-34451

creationtimestamp| type| source ---|---|--- 2026-01-17 12:06:13+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mcml6ev6c32v 2026-01-17 13:39:19+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mcmqeuwkfo2r...

CVE-2026-0913

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'uspaccess' shortcode in all versions up to, and including, 20260110 due to insufficient input sanitization and output escaping on user...

CVE-2025-12129

CVE-2025-12129 affects the CubeWP – All-in-One Dynamic Content Framework WordPress plugin (versions up to and including 1.1.27). Unauthenticated attackers can exfiltrate data from password-protected, private, or draft posts via the REST endpoints /cubewp-posts/v1/query-new and /cubewp-posts/v1/qu...

CVE-2025-12129

The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.27 via the /cubewp-posts/v1/query-new and /cubewp-posts/v1/query REST API endpoints due to insufficient restrictions on which posts can be include...

CVE-2025-12129 CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Information Exposure

The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.27 via the /cubewp-posts/v1/query-new and /cubewp-posts/v1/query REST API endpoints due to insufficient restrictions on which posts can be include...

EUVD-2026-3147

The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.27 via the /cubewp-posts/v1/query-new and /cubewp-posts/v1/query REST API endpoints due to insufficient restrictions on which posts can be include...