CVE-2026-65882

creationtimestamp| type| source ---|---|--- 2026-07-28 15:02:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpokv6jdp2a...

CVE-2026-42493

creationtimestamp| type| source ---|---|--- 2026-07-28 14:52:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpnzbgnnf2s 2026-07-29 13:55:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24 2026-07-30 04:45:17+00:00| seen|...

CVE-2026-62432

creationtimestamp| type| source ---|---|--- 2026-07-28 14:47:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpnqbkajb2q 2026-07-28 15:48:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpr4drlts2d 2026-07-29 13:55:22+00:00| seen|...

CVE-2025-58218

creationtimestamp| type| source ---|---|--- 2026-07-28 14:25:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrpmhj66mu27...

CVE-2026-58221

creationtimestamp| type| source ---|---|--- 2026-07-28 14:25:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrpmhj66mu27 2026-07-29 12:45:02+00:00| seen| https://www.acn.gov.it/portale/w/nuove-vulnerabilita-in-samba-1 2026-08-01 21:40:36+00:00| seen|...

CVE-2026-51302

creationtimestamp| type| source ---|---|--- 2026-07-28 14:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrplmo2ldr2r 2026-07-29 01:00:03+00:00| seen| https://t.me/GithubRedTeam/95603 2026-07-29 04:00:05+00:00| seen| Telegram/icfrk9NJ0r9US8j4ZgZwjdU3nJ-xiydIySZk2Z3ro5QcgA...

CVE-2026-51300

creationtimestamp| type| source ---|---|--- 2026-07-28 14:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrplmmp43k2s...

CVE-2026-15016

The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Readonly User Field via pmpromemberprofileedit Shortcode in all versions up to, and including, 3.8.1 due to insufficient input sanitization...

CVE-2026-15016

CVE-2026-15016 affects the Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions WordPress plugin. The vulnerability is a Stored Cross-Site Scripting issue in the Readonly User Field via the [pmpro_member_profile_edit] shortcode, exploitable in all versions up to and...

CVE-2026-15016

The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Readonly User Field via pmpromemberprofileedit Shortcode in all versions up to, and including, 3.8.1 due to insufficient input sanitization...

CVE-2026-15016 Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions <= 3.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Readonly User Field via pmpromemberprofileedit Shortcode in all versions up to, and including, 3.8.1 due to insufficient input sanitization...

EUVD-2026-49789

The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Readonly User Field via pmpromemberprofileedit Shortcode in all versions up to, and including, 3.8.1 due to insufficient input sanitization...

CVE-2026-59248

creationtimestamp| type| source ---|---|--- 2026-07-28 12:21:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpfl753522x...

CVE-2026-15267

creationtimestamp| type| source ---|---|--- 2026-07-28 12:11:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpezcbinh2i...

CVE-2026-10207

creationtimestamp| type| source ---|---|--- 2026-07-28 12:01:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpehfd6be23 2026-07-28 15:06:49+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrpos4bbbw2d...

CVE-2026-14516

creationtimestamp| type| source ---|---|--- 2026-07-28 11:33:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpcvdklcz23...

CVE-2026-13161

creationtimestamp| type| source ---|---|--- 2026-07-28 11:30:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrpcpxmcwm2j...

CVE-2026-59243

creationtimestamp| type| source ---|---|--- 2026-07-28 11:02:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpb5kx43v2d 2026-07-29 16:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrseoxjskc2i 2026-08-04 22:00:04+00:00| published-proof-of-concept|...

CVE-2026-10207

The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplied input via the 'id' GET parameter in the user profile template combined with the use of wpunslash which removes...

CVE-2026-10207 PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter

The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplied input via the 'id' GET parameter in the user profile template combined with the use of wpunslash which removes...