CVE-2026-16957

The Slim SEO WordPress plugin before 4.9.11 does not restrict a post-meta preview feature to posts the user is allowed to edit, verifying only read access, allowing users with the Contributor role to read arbitrary post meta, including protected and private keys, of published posts they do not ow...

CVE-2026-16957

The CVE describes a vulnerability in the Slim SEO WordPress plugin (pre-4.9.11) where a post-meta preview feature does not properly restrict access to posts a user can edit; it only checks read permission. As a result, users with the Contributor role (and higher) can read arbitrary post meta, inc...

CVE-2026-16957 Slim SEO < 4.9.11 - Contributor+ Arbitrary Post Meta Disclosure

The Slim SEO WordPress plugin before 4.9.11 does not restrict a post-meta preview feature to posts the user is allowed to edit, verifying only read access, allowing users with the Contributor role to read arbitrary post meta, including protected and private keys, of published posts they do not ow...

EUVD-2026-54888

The Slim SEO WordPress plugin before 4.9.11 does not restrict a post-meta preview feature to posts the user is allowed to edit, verifying only read access, allowing users with the Contributor role to read arbitrary post meta, including protected and private keys, of published posts they do not ow...

CVE-2026-16955

creationtimestamp| type| source ---|---|--- 2026-08-08 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117058713911525712 2026-08-08 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mskkg4ykio2a 2026-08-08 08:50:01+00:00| seen|...

EUVD-2026-54194

AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts. The affected templates inserted message and post identifiers directly into inline JavaScript onclick handlers: onclick="translateMessageToPreferredLanguage'...

EUVD-2025-210644

The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the editposts capability from reading globally password-protected content through the WordPress core REST API when global protection is enabled, allowing any Contributor or higher to read the content of...

CVE-2026-71447

AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts. The affected templates inserted message and post identifiers directly into inline JavaScript onclick handlers: onclick="translateMessageToPreferredLanguage'...

CVE-2025-15674 Content Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST API

The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the editposts capability from reading globally password-protected content through the WordPress core REST API when global protection is enabled, allowing any Contributor or higher to read the content of...

CVE-2025-15674

Passster (WordPress plugin) before 4.3.7 allows low-privilege users with edit_posts capability to read globally password-protected content via the WordPress REST API when global protection is enabled. Any Contributor or higher can access protected pages/posts without the password. A fix is availa...

CVE-2026-71447

CVE-2026-71447 : In the AIL Project (ail-framework), translation controls for chat messages and forum posts store identifiers into inline JavaScript onclick handlers without safe encoding for JS string literals. Although escaping is applied for HTML, the values can terminate the string argument, ...

CVE-2026-71447 Stored Cross-Site Scripting in Chat and Forum Translation Controls in ail-framework

AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts. The affected templates inserted message and post identifiers directly into inline JavaScript onclick handlers: onclick="translateMessageToPreferredLanguage'...

CVE-2026-71447 Stored Cross-Site Scripting in Chat and Forum Translation Controls in ail-framework

AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts. The affected templates inserted message and post identifiers directly into inline JavaScript onclick handlers: onclick="translateMessageToPreferredLanguage'...

CVE-2026-66709

creationtimestamp| type| source ---|---|--- 2026-08-06 16:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggxseog32p 2026-08-06 21:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgws3k3xd2l...

CVE-2026-65575

creationtimestamp| type| source ---|---|--- 2026-08-06 16:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggn4vxwm2a 2026-08-06 18:06:42+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msgn22kamc2e 2026-08-06 18:06:45+00:00| seen|...

CVE-2026-66710

creationtimestamp| type| source ---|---|--- 2026-08-06 16:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgfzgsj2h2z 2026-08-06 16:08:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/clljb6nruttbm...

CVE-2026-63687

creationtimestamp| type| source ---|---|--- 2026-08-06 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgffqh7u42u 2026-08-06 21:11:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/fqsngttlj2rzl 2026-08-07 10:07:06+00:00| seen|...

CVE-2026-68079

creationtimestamp| type| source ---|---|--- 2026-08-06 15:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfc5inum2h 2026-08-06 21:24:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/i4vkmjasii72h 2026-08-07 04:07:06+00:00| seen|...

CVE-2026-64564

creationtimestamp| type| source ---|---|--- 2026-08-06 15:03:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/55u7vzwmlbett 2026-08-06 15:22:49+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/117049246952190178 2026-08-06 15:25:14+00:00| seen|...

CVE-2026-18970

creationtimestamp| type| source ---|---|--- 2026-08-06 11:00:40+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117048216095721886 2026-08-06 11:00:40+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msfva7xipf2t...