23303 matches found
CVE-2026-2721
creationtimestamp| type| source ---|---|--- 2026-03-07 03:28:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggv37wbek27...
CVE-2026-2020
creationtimestamp| type| source ---|---|--- 2026-03-07 03:21:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgguojnwgn2e 2026-03-07 08:15:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghf4uyagj25 2026-03-07 08:15:56+00:00| seen|...
CVE-2026-25072
creationtimestamp| type| source ---|---|--- 2026-03-07 03:08:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggtxpxuoi2y...
CVE-2025-14353
creationtimestamp| type| source ---|---|--- 2026-03-07 03:02:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggtnmaqmu2x 2026-03-07 04:20:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mggxz3abjs2n 2026-03-07 08:16:04+00:00| seen|...
CVE-2026-28450
OpenClaw versions prior to 2026.2.12 with the optional Nostr plugin enabled expose unauthenticated HTTP endpoints at /api/channels/nostr/:accountId/profile and /api/channels/nostr/:accountId/profile/import that allow reading and modifying Nostr profiles without gateway authentication. Remote...
EUVD-2026-10089
The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'updateaction' function. This makes it possible for unauthenticated attackers to approve or reject user account...
WordPress WP Frontend Profile plugin <= 1.3.8 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection vulnerability
Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection vulnerability discovered by johska in WordPress Plugin WP Frontend Profile versions = 1.3.8...
WordPress plugin WP Frontend Profile 跨站请求伪造漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...
CVE-2026-30237
creationtimestamp| type| source ---|---|--- 2026-03-06 23:24:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgghhg377b2u...
CVE-2026-1644
The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'updateaction' function. This makes it possible for unauthenticated attackers to approve or reject user account...
CVE-2026-1644 WP Frontend Profile <= 1.3.8 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection
The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'updateaction' function. This makes it possible for unauthenticated attackers to approve or reject user account...
CVE-2026-1644 WP Frontend Profile <= 1.3.8 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection
The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'updateaction' function. This makes it possible for unauthenticated attackers to approve or reject user account...
CVE-2026-1644
CVE-2026-1644 pertains to the WP Frontend Profile plugin for WordPress, affected through version 1.3.8. The root cause is missing nonce validation in the update_action function, enabling Cross-Site Request Forgery. This allows unauthenticated attackers to influence user account registrations (app...
CVE-2026-30231
creationtimestamp| type| source ---|---|--- 2026-03-06 23:02:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgggagbehq27...
CVE-2026-30843
creationtimestamp| type| source ---|---|--- 2026-03-06 21:09:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgg7vhzc662u...
CVE-2026-29087
creationtimestamp| type| source ---|---|--- 2026-03-06 19:57:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgg3uyapxa2o 2026-03-07 09:30:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghjdj5siw2v 2026-04-15 07:07:08+00:00| seen|...
CVE-2025-69644
creationtimestamp| type| source ---|---|--- 2026-03-06 19:00:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfyps4ynz2k 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2026-30920
creationtimestamp| type| source ---|---|--- 2026-03-06 18:07:42+00:00| published-proof-of-concept| https://github.com/OneUptime/oneuptime/security/advisories/GHSA-656w-6f6c-m9r6 2026-03-10 16:40:16+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30920...