CVE-2026-32899

creationtimestamp| type| source ---|---|--- 2026-03-21 04:27:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhk6w3iwbn2n 2026-03-22 03:00:05+00:00| seen| https://github.com/openclaw/openclaw/security/advisories/GHSA-rm2p-j3r7-4x4j...

CVE-2026-4261 Expire Users <= 1.2.2 - Authenticated (Subscriber+) Privilege Escalation to Administrator via save_extra_user_profile_fields

The Expire Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.2. This is due to the plugin allowing a user to update the 'onexpiredefaulttorole' meta through the 'saveextrauserprofilefields' function. This makes it possible for authenticated...

CVE-2026-32045

creationtimestamp| type| source ---|---|--- 2026-03-21 03:10:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhk2mi65ag2e 2026-03-21 06:44:39+00:00| seen| https://bsky.app/profile/printy.margin.cafe/post/3mhkglezkno27 2026-03-22 03:00:05+00:00| seen|...

CVE-2026-32064

creationtimestamp| type| source ---|---|--- 2026-03-21 03:00:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhk22lcakl2n 2026-03-21 21:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhlwg2k2gs2s 2026-03-22 03:00:05+00:00| seen|...

CVE-2026-32049

creationtimestamp| type| source ---|---|--- 2026-03-21 02:41:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjyy2flk42y 2026-03-21 22:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhlzrziedd2c 2026-03-22 03:00:05+00:00| seen|...

CVE-2026-4508

creationtimestamp| type| source ---|---|--- 2026-03-21 00:48:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjsoze7pk2u...

CVE-2026-33411

creationtimestamp| type| source ---|---|--- 2026-03-21 00:38:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjs54jw7527...

CVE-2026-33422

creationtimestamp| type| source ---|---|--- 2026-03-21 00:04:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjq75xxiy2e...

PT-2026-26947

Name of the Vulnerable Software and Affected Versions WordPress Import and export users and customers plugin versions up to and including 1.29.7 Description The Import and export users and customers plugin for WordPress is susceptible to privilege escalation. This occurs because the save extra us...

CVE-2026-33291

creationtimestamp| type| source ---|---|--- 2026-03-20 23:50:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjphamxxp2e...

CVE-2026-33180

creationtimestamp| type| source ---|---|--- 2026-03-20 23:43:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjozj5loo2u...

CVE-2026-33243

creationtimestamp| type| source ---|---|--- 2026-03-20 23:18:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjnnyvtud2s 2026-03-21 00:15:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjqtuti2t2e 2026-03-25 20:00:15+00:00| seen|...

CVE-2026-32940

creationtimestamp| type| source ---|---|--- 2026-03-20 23:15:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjnhynt6e2u 2026-03-29 16:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi7lllxu6d2f 2026-03-29 16:40:10+00:00| seen|...

CVE-2026-33037

creationtimestamp| type| source ---|---|--- 2026-03-20 23:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjmopgk4k2c 2026-03-20 23:04:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjmu4qtlm2t 2026-03-23 23:40:09+00:00| seen|...

CVE-2026-4270

creationtimestamp| type| source ---|---|--- 2026-03-20 21:06:27+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mhjgbipipg2i 2026-03-25 16:08:38+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3mhvhxk4vtq2r...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the downloadprofilepicture function in the /profilepictures/foldername/filename endpoint, where the foldername and filename parameters are not properly filtered. An attacker can access sensitive files outside the...

GHSA-PH9W-R52H-28P7 langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading

Vulnerability Path Traversal in GET /api/v1/files/profilepictures/foldername/filename The downloadprofilepicture function in src/backend/base/langflow/api/v1/files.py constructed file paths by directly concatenating the user-supplied foldername and filename path parameters without sanitization or...

langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading

Vulnerability Path Traversal in GET /api/v1/files/profilepictures/foldername/filename The downloadprofilepicture function in src/backend/base/langflow/api/v1/files.py constructed file paths by directly concatenating the user-supplied foldername and filename path parameters without sanitization or...

CVE-2026-4519

creationtimestamp| type| source ---|---|--- 2026-03-20 19:45:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mhjbqalnii2b 2026-03-23 14:40:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhqc3mulg524 2026-03-27 15:15:28+00:00| seen|...

CVE-2026-4226

creationtimestamp| type| source ---|---|--- 2026-03-20 19:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhj77qw5fy2w...