CVE-2026-0617

The CVE concerns the LatePoint – Calendar Booking Plugin for Appointments and Events (WordPress). A stored XSS vulnerability exists in customer profile fields across all versions up to 5.2.5 due to insufficient input sanitization and output escaping, enabling unauthenticated attackers to inject s...

EUVD-2026-5287

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer profile fields in all versions up to, and including, 5.2.5 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-0617 LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.5 - Unauthenticated Stored Cross-Site Scripting

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer profile fields in all versions up to, and including, 5.2.5 due to insufficient input sanitization and output escaping. This makes it possible for...

WordPress User Profile Builder plugin < 3.15.2 - Unauthenticated Arbitrary Password Reset vulnerability

Unauthenticated Arbitrary Password Reset vulnerability discovered by Drew Webber mcdruid in WordPress Plugin Profile Builder versions 3.15.2...

CVE-2026-20403

creationtimestamp| type| source ---|---|--- 2026-02-03 00:15:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw3eiudex22...

PT-2026-5834

Name of the Vulnerable Software and Affected Versions School ERP Pro version 1.0 Description School ERP Pro version 1.0 has a flaw that permits authenticated administrators to upload arbitrary PHP files as profile pictures, circumventing file extension validation. This is due to inadequate file...

VulnCheck KEV: CVE-2025-15030

The User Profile Builder WordPress plugin before 3.15.2 does not have a proper password reset process, allowing a few unauthenticated requests to reset the password of any user by knowing their username, such as administrator ones, and therefore gain access to their account...

CVE-2026-20405

creationtimestamp| type| source ---|---|--- 2026-02-02 23:52:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw24cxzjz2h 2026-02-02 23:53:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw255aha32a...

CVE-2026-20404

creationtimestamp| type| source ---|---|--- 2026-02-02 23:29:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvytiqzay2x 2026-02-02 23:52:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw24vyjnq2v...

CVE-2026-22778

creationtimestamp| type| source ---|---|--- 2026-02-02 23:21:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvyebz7eh2h 2026-02-02 23:28:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvyretvka24 2026-02-02 23:29:17+00:00| seen|...

CVE-2026-24763

creationtimestamp| type| source ---|---|--- 2026-02-02 23:20:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvybxhoko2x 2026-02-03 08:50:51+00:00| seen| https://gist.github.com/alon710/da71e1b21c019ed67ddac780407f1bdf...

CVE-2026-25142

creationtimestamp| type| source ---|---|--- 2026-02-02 23:18:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvy7k6mqx2h 2026-02-02 23:18:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvy7z5mdq24 2026-02-05 21:23:40+00:00| seen|...

CVE-2026-20412

creationtimestamp| type| source ---|---|--- 2026-02-02 18:18:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvhha7eum2o...

CVE-2025-47359

creationtimestamp| type| source ---|---|--- 2026-02-02 16:59:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvd2bdm7p23 2026-02-02 17:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvd2zbtg224...

CVE-2025-47358

creationtimestamp| type| source ---|---|--- 2026-02-02 16:59:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvd22tstz27 2026-02-02 17:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvd2ren7h23...

CVE-2026-20408

creationtimestamp| type| source ---|---|--- 2026-02-02 15:19:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdv5halads25 2026-02-26 06:00:19+00:00| seen| https://gist.github.com/alon710/da39dcc9fe306db6392f03e1d604965f...

CVE-2026-23997

creationtimestamp| type| source ---|---|--- 2026-02-02 10:50:35+00:00| published-proof-of-concept| https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-4v7v-7v7r-3r5h 2026-02-02 23:21:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvyeaundd2r 2026-02-02...

CVE-2026-24127

creationtimestamp| type| source ---|---|--- 2026-02-02 10:32:15+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3mdunf4agu22k 2026-09-01 20:00:13+00:00| seen| https://t.me/hackingAttack/178783 2026-09-01 20:00:13+00:00| seen| https://t.me/hackingAttack/178785 2026-09-02...

CVE-2026-1117

creationtimestamp| type| source ---|---|--- 2026-02-02 10:18:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdummjackv2m...

CVE-2026-25505

creationtimestamp| type| source ---|---|--- 2026-02-02 07:50:33+00:00| published-proof-of-concept| https://github.com/maziggy/bambuddy/security/advisories/GHSA-gc24-px2r-5qmf 2026-02-04 20:21:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2p7pyn6f2r 2026-02-15...