PT-2026-44747

Name of the Vulnerable Software and Affected Versions Breeze versions prior to 2.5.3 Description Improper verification of the wordpress logged in cookie in the inc/cache/execute-cache.php file occurs when the "Cache Logged-in Users" setting is enabled. The plugin uses the substr function to parse...

WordPress plugin Breeze 信息泄露漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

CVE-2026-44973

creationtimestamp| type| source ---|---|--- 2026-05-28 23:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmx4v7ofxl2a 2026-05-28 23:46:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx7f7xx5a2e...

CVE-2026-32847

creationtimestamp| type| source ---|---|--- 2026-05-28 21:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww4ttzlh2e 2026-05-28 21:31:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwxto2a7x2o...

CVE-2026-49127

creationtimestamp| type| source ---|---|--- 2026-05-28 21:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww4f2zpy2k 2026-05-28 21:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwyscpvqc2k...

CVE-2026-44463

creationtimestamp| type| source ---|---|--- 2026-05-28 20:08:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwt7frvk42e 2026-05-28 21:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww6msug72z 2026-06-03 02:37:05+00:00| seen|...

CVE-2026-44466

creationtimestamp| type| source ---|---|--- 2026-05-28 18:02:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwm5ilszt2s 2026-05-28 19:35:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwreavbin2t 2026-06-02 22:07:07+00:00| seen|...

CVE-2026-44358

creationtimestamp| type| source ---|---|--- 2026-05-28 17:02:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwitm35eb2n 2026-05-28 17:14:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjhs5e3k2o...

CVE-2026-47762

creationtimestamp| type| source ---|---|--- 2026-05-28 17:02:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwitepmxs2r 2026-05-28 17:02:51+00:00| seen| https://bsky.app/profile/potato.software/post/3mmwitfsqyw2t 2026-05-28 17:16:24+00:00| seen|...

CVE-2026-47761

creationtimestamp| type| source ---|---|--- 2026-05-28 17:01:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiqloac22z 2026-05-28 17:05:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwixsmqhn2i 2026-05-29 00:37:08+00:00| seen|...

CVE-2026-47760

creationtimestamp| type| source ---|---|--- 2026-05-28 17:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiqdulb42e 2026-05-28 17:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwiv4daft2e 2026-05-28 22:07:07+00:00| seen|...

CVE-2026-8689

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.11.14. This is due to a missing capability check on the renderChartPages and uploadData functions, where the wpajaxvisualizer-create-chart an...

CVE-2026-7802

creationtimestamp| type| source ---|---|--- 2026-05-28 07:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmvh6mbxne2l 2026-05-28 07:02:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhcdq5r42p...

CVE-2026-9009

creationtimestamp| type| source ---|---|--- 2026-05-28 07:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmvh6e6h3x2n 2026-05-28 07:20:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvicngffi2e 2026-05-28 07:30:29+00:00| seen|...

CVE-2026-9228

The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.16 via the actiongeteventdata due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2026-9228 Timetable and Event Schedule by MotoPress <= 2.4.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via action_get_event_data Function

The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.16 via the actiongeteventdata due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2026-9228

The Timetable and Event Schedule by MotoPress plugin for WordPress (MP Timetable) is affected by an Insecure Direct Object Reference vulnerability (CVE-2026-9228) in all versions up to 2.4.16. The root cause is missing validation on a user-controlled key in the action_get_event_data endpoint, ena...

EUVD-2026-32705

The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.16 via the actiongeteventdata due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2026-9228

The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.16 via the actiongeteventdata due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2026-9228 Timetable and Event Schedule by MotoPress <= 2.4.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via action_get_event_data Function

The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.16 via the actiongeteventdata due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...