YMC Filter WordPress - Unauthenticated Post Disclosure

YMC Filter WordPress plugin 3.11.3 contains a broken access control vulnerability caused by improper authorization and lack of validation in a REST API endpoint, letting unauthenticated attackers retrieve private and non-public post content, exploit requires no authentication. id: CVE-2026-10823...

CVE-2026-16242

creationtimestamp| type| source ---|---|--- 2026-07-20 08:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr2ugysfwu2e 2026-07-20 08:31:04+00:00| seen| https://bsky.app/profile/suriq.io/post/3mr2ux2hzsc2u 2026-07-20 09:25:32+00:00| seen|...

CVE-2026-13082

creationtimestamp| type| source ---|---|--- 2026-07-17 13:45:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtv3zaa5l2d 2026-07-17 14:10:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqtwidfcfi2d...

CVE-2026-61736

creationtimestamp| type| source ---|---|--- 2026-07-15 15:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2zvftsc2w 2026-07-15 16:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp3qmrswz2h 2026-07-20 22:35:18+00:00|...

CVE-2026-50527

creationtimestamp| type| source ---|---|--- 2026-07-14 19:00:59+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235 2026-07-14 20:34:10+00:00| seen| https://bsky.app/profile/blowdart.me/post/3mqn2jvvr2k2u 2026-07-14 20:34:18+00:00| seen|...

CVE-2026-59083

creationtimestamp| type| source ---|---|--- 2026-07-14 09:50:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqlwlywipr2y 2026-07-14 11:39:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm4p7oagg2k 2026-07-14 12:42:05+00:00| seen|...

CVE-2026-57811

creationtimestamp| type| source ---|---|--- 2026-07-13 10:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjivgc6hi2g 2026-07-13 11:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjll56d3f2h 2026-07-13 18:16:29+00:00| seen|...

CVE-2026-56313

creationtimestamp| type| source ---|---|--- 2026-07-12 12:30:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6liqhun2y 2026-07-12 13:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhacp5ihg2w 2026-07-12 13:02:28+00:00| seen|...

CVE-2026-15485

creationtimestamp| type| source ---|---|--- 2026-07-12 08:31:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgr7yo3wh27 2026-07-12 11:32:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3ez2kjy2w 2026-07-12 12:15:03+00:00| seen|...

CVE-2026-41042

creationtimestamp| type| source ---|---|--- 2026-07-08 16:20:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5jlooecl2f 2026-07-08 16:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5jrsw37s22...

CVE-2026-56841

creationtimestamp| type| source ---|---|--- 2026-07-02 17:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj3e3m3z26 2026-07-02 18:36:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoofozn5v27 2026-07-03 07:24:14+00:00| seen|...

CVE-2026-20216

creationtimestamp| type| source ---|---|--- 2026-07-02 13:50:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fqhjmd2f 2026-07-02 13:55:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6nxwhpz2q...

CVE-2026-50110

creationtimestamp| type| source ---|---|--- 2026-07-01 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpk7kukqzx2v 2026-07-01 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116841777496408584 2026-07-01 02:31:46+00:00| seen|...

CVE-2026-13165

creationtimestamp| type| source ---|---|--- 2026-06-29 15:18:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgrwxop7n2x 2026-06-29 15:47:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtjzm7572o 2026-06-29 21:13:46+00:00| seen|...

PT-2026-52664

Name of the Vulnerable Software and Affected Versions YMC Filter WordPress plugin versions prior to 3.11.3 Description An issue exists where the software fails to properly authorize access to a REST API endpoint and does not validate a user-supplied query parameter. This allows unauthenticated...

CVE-2026-50551

creationtimestamp| type| source ---|---|--- 2026-06-25 02:08:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3dwi46mr2x 2026-06-25 03:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mp3gsuacvy2b 2026-06-25 03:00:28+00:00| seen|...

CVE-2026-12786

creationtimestamp| type| source ---|---|--- 2026-06-21 09:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116787277091790305 2026-06-21 11:45:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moscbep5rm2n...

CVE-2026-7515

creationtimestamp| type| source ---|---|--- 2026-06-19 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3momy567jwx2t 2026-06-19 09:00:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116775952596013865 2026-06-22 00:39:28+00:00| seen|...

CVE-2026-53849

creationtimestamp| type| source ---|---|--- 2026-06-16 21:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogoznygie2a 2026-06-16 21:25:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogqe2tzjc2x 2026-06-19 06:12:11+00:00| seen|...

CVE-2026-44249

creationtimestamp| type| source ---|---|--- 2026-06-12 01:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2k2h43or2t 2026-06-12 01:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2mj5sag22j 2026-06-15 04:37:06+00:00| seen|...