CVE-2025-71243

creationtimestamp| type| source ---|---|--- 2026-02-19 16:31:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf7zfeggqx2u 2026-02-19 16:32:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf7zhav6ty2t 2026-03-09 09:47:36+00:00| seen|...

CVE-2026-26362

creationtimestamp| type| source ---|---|--- 2026-02-19 16:04:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf7xux7eab2s 2026-02-19 16:28:31+00:00| seen| https://bsky.app/profile/potato.software/post/3mf7z7siwjz25 2026-02-19 23:00:18+00:00| seen|...

CVE-2025-13590

creationtimestamp| type| source ---|---|--- 2026-02-19 15:45:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf7ws2xden2c...

CVE-2026-25755

creationtimestamp| type| source ---|---|--- 2026-02-19 15:43:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf7wojurce26 2026-02-19 22:20:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfamumun4e2l 2026-02-23 11:44:09+00:00| seen|...

CVE-2026-2698

creationtimestamp| type| source ---|---|--- 2026-02-19 14:20:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mf7s2qbcjk24...

CVE-2026-2697

creationtimestamp| type| source ---|---|--- 2026-02-19 14:20:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mf7s2qbcjk24...

CVE-2026-1373

The Easy Author Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'authorprofilepictureurl' parameter in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-1373 Easy Author Image <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Picture URL

The Easy Author Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'authorprofilepictureurl' parameter in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-1373

The CVE-2026-1373 affects the WordPress plugin Easy Author Image (affected: all versions up to 1.7). It enables a Stored Cross-Site Scripting via the author_profile_picture_url parameter due to insufficient input sanitization and output escaping. Exploitation requires an authenticated user with S...

CVE-2026-1373 Easy Author Image <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Picture URL

The Easy Author Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'authorprofilepictureurl' parameter in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-4521 IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_profile Function

The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the idonatedonorprofile function in versions 2.1.5 to 2.1.9. This makes it possible for authenticated attackers, with Subscriber-level...

CVE-2025-4521 IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_profile Function

The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the idonatedonorprofile function in versions 2.1.5 to 2.1.9. This makes it possible for authenticated attackers, with Subscriber-level...

CVE-2026-5918

creationtimestamp| type| source ---|---|--- 2026-02-19 03:00:19+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mf6m2n4bgu27 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-12 20:00:00+00:00|...

CVE-2025-70151

code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints updateprofilepicture.php and uploadpicture.php store uploaded files in a web-accessible uploads/ directory using the original, user-supplied...

CVE-2026-2686

creationtimestamp| type| source ---|---|--- 2026-02-19 00:19:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf6d37tp332v 2026-02-19 01:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mf6h24uklr25 2026-02-19 01:30:36+00:00| seen|...

WordPress plugin Easy Author Image 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-20636

The Easy Author Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author profile picture url' parameter in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2026-20624

Name of the Vulnerable Software and Affected Versions IDonate – Blood Donation, Request And Donor Management System plugin for WordPress versions 2.1.5 through 2.1.9 Description The IDonate plugin for WordPress has a flaw that allows unauthorized privilege escalation. Attackers with...

CVE-2026-2649

creationtimestamp| type| source ---|---|--- 2026-02-18 23:26:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf6a4u7wx72d 2026-02-19 04:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mf6r3yjytx2w 2026-02-19 04:30:34+00:00| seen|...

CVE-2026-27174

creationtimestamp| type| source ---|---|--- 2026-02-18 22:19:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf64fd24o42c 2026-02-19 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mf6bzhri252c 2026-02-19 00:00:48+00:00| seen|...