CVE-2026-64879

creationtimestamp| type| source ---|---|--- 2026-07-21 21:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6pm2rbos24 2026-07-21 23:32:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6xsbr2z722...

CVE-2026-8933

creationtimestamp| type| source ---|---|--- 2026-07-21 15:08:09+00:00| seen| https://bsky.app/profile/arc-codex.com/post/3mr63m2s54b2k 2026-07-21 15:23:47+00:00| seen| https://bsky.app/profile/arc-codex.com/post/3mr64hz2xco2g 2026-07-21 15:36:50+00:00| seen|...

CVE-2026-14185

creationtimestamp| type| source ---|---|--- 2026-07-21 10:02:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5kjwyjep2e...

WordPress Easy Social Icons Plugin < 3.0.9 - Cross-Site Scripting

The Easy Social Icons plugin = 3.0.8 for WordPress echoes out the raw value of $SERVER'PHPSELF' in its main file. On certain configurations including Apache+modPHP this makes it possible to use it to perform a reflected cross-site scripting attack by injecting malicious code in the request path...

Social Login by BestWebSoft < 0.2 - Cross-Site Scripting

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues. id: CVE-2017-18501 info: name: Social Login by BestWebSoft 0.2 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...

Social Buttons Pack by BestWebSof < 1.1.1 - Cross-Site Scripting

The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues. id: CVE-2017-18500 info: name: Social Buttons Pack by BestWebSof 1.1.1 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The social-buttons-pack plugin before 1.1.1 for WordPress has...

Social Auto Poster <= 5.3.14 - Stored Cross-Site Scripting

Social Auto Poster plugin for WordPress versions up to 5.3.14 contains a stored cross-site scripting caused by insufficient sanitization and escaping of 'mapTypes' parameter in the 'wpwautopostermapwordpressposttype' AJAX function, letting unauthenticated attackers inject and execute arbitrary...

Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login

The Registration Forms User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or username...

2 Click Socialmedia Buttons < 0.34 - Cross-Site Scripting

A cross-site scripting vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter. id: CVE-2012-4273 info: name: 2 Click Socialmedia Buttons 0.34 - Cross-Site Scripti...

Sassy Social Share <= 3.3.3 - Cross-Site Scripting

The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateorssssharingcount' AJAX action in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for...

Miniorange Social Login and Register <= 7.6.3 - Authentication Bypass

The WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login validated through the plugin. This makes...

WordPress Widgets for Social Photo Feed <= 1.8 - Information Disclosure

Widgets for Social Photo Feed WordPress plugin = 1.8 contains a broken access control caused by missing capability checks on specific REST API endpoints, letting unauthenticated attackers access and modify plugin settings remotely. id: CVE-2025-14726 info: name: WordPress Widgets for Social Photo...

CVE-2026-8169

creationtimestamp| type| source ---|---|--- 2026-07-20 21:07:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr476wzvgh2i...

CVE-2026-63429

creationtimestamp| type| source ---|---|--- 2026-07-20 17:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rg45qoq2j 2026-07-20 17:11:49+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116953416257282503 2026-07-20 17:11:49+00:00| seen|...

CVE-2026-51027

creationtimestamp| type| source ---|---|--- 2026-07-20 16:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3qf2lcto2r 2026-07-20 17:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rgcsfas2f 2026-07-20 17:50:52+00:00| seen|...

CVE-2026-12701

creationtimestamp| type| source ---|---|--- 2026-07-20 15:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3marmjpe2v 2026-07-20 16:41:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr3qetak6c2j 2026-07-20 18:05:10+00:00| seen|...

CVE-2026-13142

creationtimestamp| type| source ---|---|--- 2026-07-20 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116951130173651435 2026-07-20 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mr2rkpgosv2t 2026-07-20 08:10:24+00:00| seen|...

CVE-2024-7708

creationtimestamp| type| source ---|---|--- 2026-07-20 05:47:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2ls27hxa23 2026-07-20 05:47:12+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2ls2cadi2w...

CVE-2025-8412

creationtimestamp| type| source ---|---|--- 2026-07-20 05:17:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2k5ssvac2u 2026-07-20 05:18:00+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2k5tfv2525...

CVE-2026-10051

creationtimestamp| type| source ---|---|--- 2026-07-20 05:17:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2k53gkmh2m 2026-07-20 05:17:38+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mr2k57hgfq2c...