GHSA-R9W3-57W2-GCH2

creationtimestamp| type| source ---|---|--- 2026-03-26 19:26:19+00:00| published-proof-of-concept| Telegram/Dv-WNIQSBfenZP-L8llbvWNomtb7L7cuRFseuDShUkzpu6g...

GHSA-4MQ7-PVJG-XP2R

creationtimestamp| type| source ---|---|--- 2026-03-26 19:26:19+00:00| published-proof-of-concept| Telegram/Dv-WNIQSBfenZP-L8llbvWNomtb7L7cuRFseuDShUkzpu6g...

CVE-2026-33503

creationtimestamp| type| source ---|---|--- 2026-03-26 19:26:19+00:00| published-proof-of-concept| Telegram/Dv-WNIQSBfenZP-L8llbvWNomtb7L7cuRFseuDShUkzpu6g...

CVE-2026-23807

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

CVE-2026-29905

creationtimestamp| type| source ---|---|--- 2026-03-26 17:00:05+00:00| seen| https://t.me/GithubRedTeam/77378 2026-05-01 17:00:03+00:00| seen| https://t.me/GithubRedTeam/82353...

CVE-2026-34172

creationtimestamp| type| source ---|---|--- 2026-03-26 16:26:44+00:00| published-proof-of-concept| https://github.com/Giskard-AI/giskard-oss/security/advisories/GHSA-frv4-x25r-588m 2026-03-31 17:25:19+00:00| seen| Telegram/nw5w-ohs-CK0Rjuv5tJSQsl41JpqhSQHTKMS4QN8816OY...

A $20 Billion Crypto Scam Market Faces a New Government Crackdown

The Telegram-based Xinbi Guarantee black market sells services that help prop up scam operations. British officials just hit the highly lucrative marketplace with sweeping sanctions...

New PXA Stealer Malware Targets Banks, Uses Telegram to Exfiltrate Data

CyberProof researchers have detected a 10% surge in PXA Stealer attacks targeting financial institutions in Q1 2026. Learn…...

CVE-2026-30039

creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/77241...

CVE-2025-52204

creationtimestamp| type| source ---|---|--- 2026-03-25 20:02:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/77212...

EUVD-2026-15543

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

CVE-2026-23807

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

CVE-2026-34041

creationtimestamp| type| source ---|---|--- 2026-03-25 16:46:05+00:00| published-proof-of-concept| https://github.com/nektos/act/security/advisories/GHSA-xmgr-9pqc-h5vw 2026-03-31 05:17:29+00:00| published-proof-of-concept| Telegram/84MSU-hIhNrWnS8A8cOqhlUxSHC6aqIIGr26pihaT5cA3PI...

CVE-2026-23807 WordPress WP Telegram Widget and Join Link plugin <= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

CVE-2026-23807

The CVE-2026-23807 entry concerns the WordPress WP Telegram Widget and Join Link plugin up to version 2.2.13, which is affected by a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. The issue affects WP Telegram Widget and J...

CVE-2026-23807 WordPress WP Telegram Widget and Join Link plugin <= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

CVE-2026-34036

creationtimestamp| type| source ---|---|--- 2026-03-25 13:49:24+00:00| published-proof-of-concept| https://github.com/Dolibarr/dolibarr/security/advisories/GHSA-2mfj-r695-5h9r 2026-03-31 23:00:10+00:00| published-proof-of-concept| Telegram/P0Q0ZCX8Ywjq9vjEgqv2AzrjbsHPHPXVA5rNa0Ss-R1H3I 2026-04-01...

PT-2026-27842

Name of the Vulnerable Software and Affected Versions WP Telegram Widget and Join Link versions through 2.2.13 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to reflected cross-site scripting XSS. This allows an...

WordPress plugin WP Telegram Widget and Join Link 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials

Cybersecurity researchers have uncovered a new set of malicious npm packages that are designed to steal cryptocurrency wallets and sensitive data. The activity is being tracked by ReversingLabs as the Ghost campaign. The list of identified packages, all published by a user named mikilanjillo, is...