WordPress Easy Forms for Mailchimp Plugin < 6.8.9 - Cross-Site Scripting

The Easy Forms for Mailchimp plugin before version 6.8.9 contains a reflected cross-site scripting vulnerability. The plugin does not properly sanitize and escape the sqlerror parameter before outputting it back in the page when the debug option is enabled, which could allow attackers to execute...

WordPress W3 Total Cache <2.1.4 - Cross-Site Scripting

WordPress W3 Total Cache plugin before 2.1.4 is susceptible to cross-site scripting within the extension parameter in the Extensions dashboard, which is output in an attribute without being escaped first. This can allow an attacker to convince an authenticated admin into clicking a link to run...

CVE-2026-7654

creationtimestamp| type| source ---|---|--- 2026-06-05 23:59:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlduknsmz2g 2026-06-06 00:00:18+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mnldvanx2n2s 2026-06-06 00:55:49+00:00| seen|...

CVE-2026-11090

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2026-11092

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 15:02:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnpgnmtpud25...

CVE-2025-8873

creationtimestamp| type| source ---|---|--- 2026-06-05 00:01:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnitj56uzy2r...

CVE-2026-26555

creationtimestamp| type| source ---|---|--- 2026-06-04 23:00:15+00:00| seen| Telegram/ZO8GXKofeRUVwVPphXUXme80ypLutlvGOITV9wiiQ1h3jLc 2026-06-05 03:00:06+00:00| seen| Telegram/w0GkJHs0a-iOGxRnRQVAJ6txbFx-4W5StLXj-Qhn1zDpC10...

CVE-2025-69755

creationtimestamp| type| source ---|---|--- 2026-06-04 19:10:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnid7yxtsx2x...

CVE-2026-7764

creationtimestamp| type| source ---|---|--- 2026-06-04 06:37:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mngz5xiqip26...

PT-2026-46387

That number got my attention. I've cleaned up enough incidents to know what usually happens when a vulnerability becomes public. Attackers don't wait. Right now there are 145 WordPress plugins/themes with publicly disclosed vulnerabilities that still have no available fix. If you're running any o...

UBUNTU-CVE-2026-47065

ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter By...

CVE-2026-35083

creationtimestamp| type| source ---|---|--- 2026-06-03 12:54:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf5qnwy422d 2026-06-03 22:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mng4blz6vn2e...

CVE-2026-20230

creationtimestamp| type| source ---|---|--- 2026-06-03 12:22:10+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-547 2026-06-03 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1899 2026-06-03 23:03:34+00:00| seen|...

CVE-2025-14771

creationtimestamp| type| source ---|---|--- 2026-06-03 06:01:01+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av26-545 2026-06-03 11:29:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mneyz2dgnr2o 2026-06-03 14:01:41+00:00| seen|...

CVE-2026-33245

creationtimestamp| type| source ---|---|--- 2026-06-02 21:01:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndiiziwpy2q 2026-06-02 23:26:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mndqlviq3g23 2026-06-05 06:37:08+00:00| seen|...

CVE-2026-28573

creationtimestamp| type| source ---|---|--- 2026-06-02 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260603...

CVE-2026-10248

creationtimestamp| type| source ---|---|--- 2026-06-01 13:15:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mna5ytcuww2i...

CVE-2026-40547

creationtimestamp| type| source ---|---|--- 2026-06-01 01:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40543...

CVE-2026-10172

creationtimestamp| type| source ---|---|--- 2026-05-31 09:03:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn57gyicr627...

CVE-2024-20844

creationtimestamp| type| source ---|---|--- 2026-05-31 02:11:24+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mn4ig5dxw52m...