CVE-2026-8338

creationtimestamp| type| source ---|---|--- 2026-07-29 17:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsibe4vxy2v 2026-07-29 18:05:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsjarkuic27...

CVE-2026-65890

creationtimestamp| type| source ---|---|--- 2026-07-29 14:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrs5giyvju2e 2026-07-29 14:59:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs6ukdypn2q 2026-08-06 08:37:07+00:00| seen|...

CVE-2026-9177

creationtimestamp| type| source ---|---|--- 2026-07-29 14:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrs5cvb4ox2y 2026-07-29 15:03:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs73bdmgs2i...

CVE-2021-29490

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/3927 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/4060 2026-07-29 12:00:58+00:00| seen| https://t.me/CVEhub/3440 2026-07-29 12:01:01+00:00| seen| https://t.me/CVEhub/2139 2026-07-29...

CVE-2026-47876

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrruttu6fz24 2026-07-29 12:13:55+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrrvltod7t2w 2026-07-29 12:13:58+00:00| seen|...

CVE-2023-25292

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:29+00:00| seen| https://t.me/CVEhub/13731 2026-07-29 12:00:35+00:00| seen| https://t.me/CVEhub/11565 2026-07-30 00:00:52+00:00| seen| https://t.me/CVEhub/13731 2026-07-30 01:00:41+00:00| seen| https://t.me/CVEhub/11565 2026-07-31...

CVE-2023-28178

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:26+00:00| seen| https://t.me/CVEhub/14465 2026-07-29 12:00:26+00:00| seen| https://t.me/CVEhub/14467 2026-07-30 00:00:48+00:00| seen| https://t.me/CVEhub/14465 2026-07-30 01:00:33+00:00| seen| https://t.me/CVEhub/14467 2026-07-31...

CVE-2026-58154

creationtimestamp| type| source ---|---|--- 2026-07-29 10:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrokt44tz2r 2026-07-29 11:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrt2y3gqf27 2026-07-30 16:34:04+00:00| seen|...

EUVD-2026-50274

The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the templateredirect dispatcher in the MB Frontend Submission extension in versions up to, and including, 3.8.0. This is due to the handlerequest function routing the mbfsdelete action without any capability or...

CVE-2026-14488 Meta Box AIO <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'rwmb_frontend_field_object_id' Parameter

The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the templateredirect dispatcher in the MB Frontend Submission extension in versions up to, and including, 3.8.0. This is due to the handlerequest function routing the mbfsdelete action without any capability or...

CVE-2026-60004

creationtimestamp| type| source ---|---|--- 2026-07-29 07:59:42+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrhfbohdx2w 2026-07-29 08:02:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mrrhkep54z23 2026-07-29 09:00:07+00:00| seen|...

CVE-2026-65094

creationtimestamp| type| source ---|---|--- 2026-07-29 02:15:51+00:00| seen| https://bsky.app/profile/potato.software/post/3mrqu6gweue2n 2026-07-29 02:15:51+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrqu6fq7xr2v 2026-07-29 16:05:35+00:00| seen|...

CVE-2026-54650

creationtimestamp| type| source ---|---|--- 2026-07-29 02:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqtdm6wwg23 2026-07-29 02:46:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqvvxefvd2s 2026-07-29 03:32:05+00:00| seen|...

CVE-2026-12938

The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' attribute of the newsletterspost shortcode in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postssingle function which propagates...

PT-2026-65769

The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the template redirect dispatcher in the MB Frontend Submission extension in versions up to, and including, 3.8.0. This is due to the handle request function routing the mbfs delete action without any capability or...

CVE-2026-64863

creationtimestamp| type| source ---|---|--- 2026-07-28 23:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqm5e554m22 2026-07-29 00:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqmmv237e2q 2026-07-29 00:35:05+00:00|...

CVE-2026-14996

creationtimestamp| type| source ---|---|--- 2026-07-28 22:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqfvwf55v2d 2026-07-28 23:06:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqjm5hnqn22...

CVE-2026-54635

creationtimestamp| type| source ---|---|--- 2026-07-28 18:31:38+00:00| seen| https://gist.github.com/alon710/49b30b9938ae88ab2f795a5eb6f5b0cc 2026-07-28 18:35:03+00:00| published-proof-of-concept| https://github.com/nessshon/tonapi/security/advisories/GHSA-3fcr-jvgp-7f58 2026-07-28 19:00:36+00:00...

CVE-2026-54635 pytonapi has a Webhook Custom Path Authentication Bypass

pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain. From 2.0.0 to 2.2.0, TonapiWebhookDispatcher fails to validate the Authorization header when a webhook handler is registered with the documented path argument, because setup stores...

CVE-2026-54635 pytonapi has a Webhook Custom Path Authentication Bypass

pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain. From 2.0.0 to 2.2.0, TonapiWebhookDispatcher fails to validate the Authorization header when a webhook handler is registered with the documented path argument, because setup stores...