YMC Filter WordPress - Unauthenticated Post Disclosure

YMC Filter WordPress plugin 3.11.3 contains a broken access control vulnerability caused by improper authorization and lack of validation in a REST API endpoint, letting unauthenticated attackers retrieve private and non-public post content, exploit requires no authentication. id: CVE-2026-10823...

CVE-2026-16957

The CVE describes a vulnerability in the Slim SEO WordPress plugin (pre-4.9.11) where a post-meta preview feature does not properly restrict access to posts a user can edit; it only checks read permission. As a result, users with the Contributor role (and higher) can read arbitrary post meta, inc...

CVE-2026-16602

The Passster WordPress plugin before 4.3.6 does not perform a post-status check before returning post content from an unauthenticated REST endpoint, allowing unauthenticated users to disclose the content of non-public draft, private, and pending posts on sites that have a captcha provider...

CVE-2026-16602

CVE-2026-16602 (Passster, WordPress plugin) : The Passster plugin is affected for versions before 4.3.6. An unauthenticated REST endpoint does not perform a post-status check, allowing unauthenticated users to disclose content of non-public posts (draft, private, pending) on sites that have a cap...

EUVD-2026-53103

The Passster WordPress plugin before 4.3.6 does not perform a post-status check before returning post content from an unauthenticated REST endpoint, allowing unauthenticated users to disclose the content of non-public draft, private, and pending posts on sites that have a captcha provider...

CVE-2026-14839

CVE-2026-14839 affects Mapster WP Maps WordPress plugin (

CVE-2026-8338

creationtimestamp| type| source ---|---|--- 2026-07-29 17:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsibe4vxy2v 2026-07-29 18:05:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsjarkuic27...

CVE-2026-54650

creationtimestamp| type| source ---|---|--- 2026-07-29 02:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqtdm6wwg23 2026-07-29 02:46:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqvvxefvd2s 2026-07-29 03:32:05+00:00| seen|...

CVE-2026-62431

creationtimestamp| type| source ---|---|--- 2026-07-28 14:52:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpnys3koc2s 2026-07-28 15:43:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpqtfc6lg2u 2026-07-29 13:55:22+00:00| seen|...

CVE-2026-16242

creationtimestamp| type| source ---|---|--- 2026-07-20 08:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr2ugysfwu2e 2026-07-20 08:31:04+00:00| seen| https://bsky.app/profile/suriq.io/post/3mr2ux2hzsc2u 2026-07-20 09:25:32+00:00| seen|...

CVE-2026-13082

creationtimestamp| type| source ---|---|--- 2026-07-17 13:45:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtv3zaa5l2d 2026-07-17 14:10:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqtwidfcfi2d...

CVE-2026-61736

creationtimestamp| type| source ---|---|--- 2026-07-15 15:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2zvftsc2w 2026-07-15 16:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp3qmrswz2h 2026-07-20 22:35:18+00:00|...

CVE-2026-50651

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:01+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235 2026-07-14 20:34:12+00:00| seen| https://bsky.app/profile/blowdart.me/post/3mqn2jvvr2k2u 2026-07-14 20:34:26+00:00| seen|...

CVE-2026-50527

creationtimestamp| type| source ---|---|--- 2026-07-14 19:00:59+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235 2026-07-14 20:34:10+00:00| seen| https://bsky.app/profile/blowdart.me/post/3mqn2jvvr2k2u 2026-07-14 20:34:18+00:00| seen|...

CVE-2026-59083

creationtimestamp| type| source ---|---|--- 2026-07-14 09:50:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqlwlywipr2y 2026-07-14 11:39:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm4p7oagg2k 2026-07-14 12:42:05+00:00| seen|...

CVE-2026-57811

creationtimestamp| type| source ---|---|--- 2026-07-13 10:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjivgc6hi2g 2026-07-13 11:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjll56d3f2h 2026-07-13 18:16:29+00:00| seen|...

CVE-2026-56313

creationtimestamp| type| source ---|---|--- 2026-07-12 12:30:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6liqhun2y 2026-07-12 13:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhacp5ihg2w 2026-07-12 13:02:28+00:00| seen|...

CVE-2026-15485

creationtimestamp| type| source ---|---|--- 2026-07-12 08:31:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgr7yo3wh27 2026-07-12 11:32:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3ez2kjy2w 2026-07-12 12:15:03+00:00| seen|...

CVE-2026-41042

creationtimestamp| type| source ---|---|--- 2026-07-08 16:20:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5jlooecl2f 2026-07-08 16:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5jrsw37s22 2026-08-17 18:00:03+00:00| seen|...

CVE-2026-56841

creationtimestamp| type| source ---|---|--- 2026-07-02 17:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj3e3m3z26 2026-07-02 18:36:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoofozn5v27 2026-07-03 07:24:14+00:00| seen|...