CVE-2026-0913: Improper Neutralization of Input During Web Page Generation

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'uspaccess' shortcode in all versions up to, and including, 20260110 due to insufficient input sanitization and output escaping on user...

MiracleLinux 4 : firefox-60.8.0-1.0.1.AXS4 (AXSA:2019-3929:04)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3929:04 advisory. Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 CVE-2019-11709 Mozilla: Sandbox escape via installation of malicious language...

WordPress User Submitted Posts plugin <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'uspaccess' Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin User Submitted Posts versions = 20260110...

WordPress Related Posts by Taxonomy plugin <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'related_posts_by_tax' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'relatedpostsbytax' Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Related Posts by Taxonomy versions = 2.7.6...

CVE-2026-1009

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

CVE-2026-1009

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

CVE-2026-1009 Stored Cross-Site Scripting in Altium Live Forum Leading to Cross-Customer Data Exposure

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

CVE-2025-70893

creationtimestamp| type| source ---|---|--- 2026-01-15 22:43:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcinusvxs42m 2026-01-15 22:44:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcinv7lyo32z...

CVE-2026-21907

creationtimestamp| type| source ---|---|--- 2026-01-15 21:41:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcikepwyxf2m 2026-01-15 21:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcikrtdkxq2m...

CVE-2026-23527

creationtimestamp| type| source ---|---|--- 2026-01-15 21:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcii4gs3lp2a 2026-01-15 21:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcii4wjrn22u 2026-01-24 21:24:17+00:00| seen|...

CVE-2026-23520

creationtimestamp| type| source ---|---|--- 2026-01-15 21:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcii4bwuop2v 2026-01-15 21:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcii4oji4w2m 2026-01-19 22:53:00+00:00| seen|...

CVE-2025-36911

creationtimestamp| type| source ---|---|--- 2026-01-15 19:03:55+00:00| seen| https://bsky.app/profile/lalgorisme.bsky.social/post/3mciblg6zac24 2026-01-15 19:03:55+00:00| seen| https://bsky.app/profile/lalgorisme.bsky.social/post/3mciblg6qh224 2026-01-15 19:03:56+00:00| seen|...

CVE-2026-22265

creationtimestamp| type| source ---|---|--- 2026-01-15 17:43:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci5462lsp2u 2026-01-15 17:44:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci564g42y2u...

CVE-2026-23493

creationtimestamp| type| source ---|---|--- 2026-01-15 17:43:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci537dtkx2u 2026-01-15 17:43:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci53xg3ti2g 2026-01-15 18:07:30+00:00| seen|...

WordPress Related Posts Thumbnails Plugin for WordPress plugin <= 4.3.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Carlos Ferreira in WordPress Plugin Related Posts Thumbnails Plugin for WordPress versions = 4.3.2...

CVE-2025-13062

creationtimestamp| type| source ---|---|--- 2026-01-15 14:43:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchsznpigd2g 2026-01-15 14:43:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcht2hipda2e...

CVE-2026-22638

creationtimestamp| type| source ---|---|--- 2026-01-15 14:43:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchszgdjha2z 2026-01-15 14:43:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcht2a7wnb2u 2026-01-15 15:12:34+00:00| seen|...

CVE-2026-22643

creationtimestamp| type| source ---|---|--- 2026-01-15 14:43:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchsz6yior2f 2026-01-15 14:43:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchszz4er322 2026-01-15 15:12:34+00:00| seen|...

CVE-2026-0712

creationtimestamp| type| source ---|---|--- 2026-01-15 13:51:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq5onbx22e 2026-01-15 13:52:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq6hbhlo2a 2026-01-15 15:12:33+00:00| seen|...

CVE-2026-0813

The Short Link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shortlinkposttitle' and 'shortlinkpagetitle' parameters in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...