CVE-2026-7475

The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sky-custom-scripts custom post type in all versions up to, and including, 3.3.2. This is due to the custom post type being registered with capabilitytype = 'post' and showinrest = true, combined with...

CVE-2026-7475 Sky Addons <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Script

The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sky-custom-scripts custom post type in all versions up to, and including, 3.3.2. This is due to the custom post type being registered with capabilitytype = 'post' and showinrest = true, combined with...

CVE-2026-7475 Sky Addons <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Script

The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sky-custom-scripts custom post type in all versions up to, and including, 3.3.2. This is due to the custom post type being registered with capabilitytype = 'post' and showinrest = true, combined with...

CVE-2026-7475

The Sky Addons (WordPress) plugin, specifically Sky Elementor Addons with Widgets & Templates versions

CVE-2025-0305

creationtimestamp| type| source ---|---|--- 2026-05-08 07:32:00+00:00| seen| https://bsky.app/profile/dusk-services.bsky.social/post/3mld7mb7uwa2u 2026-05-08 07:32:00+00:00| seen| https://bsky.app/profile/dusk-services.bsky.social/post/3mld7madfxm2a 2026-05-08 07:32:01+00:00| seen|...

PT-2026-38904

Name of the Vulnerable Software and Affected Versions Sky Addons versions prior to 3.3.3 Description The Sky Addons plugin for WordPress allows authenticated attackers with Author-level access or higher to inject arbitrary web scripts. This occurs because the sky-custom-scripts custom post type i...

WordPress plugin Sky Addons 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

CVE-2026-42826

creationtimestamp| type| source ---|---|--- 2026-05-07 23:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcczpg3qd2g 2026-05-07 23:45:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcfks2gmw2k 2026-05-08 03:00:28+00:00| seen|...

CVE-2026-42501

creationtimestamp| type| source ---|---|--- 2026-05-07 21:23:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5lyf2ry2c...

WordPress Sky Addons – Elementor Addons with Widgets & Templates plugin <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Sky Addons for Elementor versions = 3.3.2...

CVE-2026-41905

creationtimestamp| type| source ---|---|--- 2026-05-07 19:21:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbwrqtmyh2q...

CVE-2026-44264

creationtimestamp| type| source ---|---|--- 2026-05-07 18:22:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbthoa76b2o...

CVE-2026-41589

creationtimestamp| type| source ---|---|--- 2026-05-07 17:09:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbpgrw5wa2c 2026-05-07 17:30:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbqlaqehf2k 2026-05-07 19:15:45+00:00| seen|...

CVE-2026-40076

creationtimestamp| type| source ---|---|--- 2026-05-07 00:00:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116530350683018033 2026-05-07 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ml7vwe264u2v 2026-05-07 01:43:26+00:00| seen|...

CVE-2026-43581

creationtimestamp| type| source ---|---|--- 2026-05-06 20:45:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kzncyfq2z 2026-05-06 21:34:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7nqjn5bp2t 2026-05-07 16:07:09+00:00| seen|...

CVE-2026-44115

creationtimestamp| type| source ---|---|--- 2026-05-06 20:36:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kisf6b72q 2026-05-06 20:36:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kju767w2c 2026-05-06 21:49:50+00:00| seen|...

CVE-2026-8002

creationtimestamp| type| source ---|---|--- 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260507 2026-05-06 23:02:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7sozho6k2q 2026-05-07 01:27:19+00:00|...

CVE-2025-31957

creationtimestamp| type| source ---|---|--- 2026-05-06 17:39:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7an7llqp2c...

CVE-2026-7049

creationtimestamp| type| source ---|---|--- 2026-05-06 17:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml7abbghlf2g 2026-09-12 10:00:19+00:00| seen| https://t.me/shimiscyberworld/1128 2026-09-13 00:00:08+00:00| seen| https://t.me/shimiscyberworld/1128...

CVE-2026-43284

creationtimestamp| type| source ---|---|--- 2026-05-05 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260506 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506...