266173 matches found
CVE-2026-8613
The CVE-2026-8613 entry concerns the WordPress plugin aThemes Addons for Elementor (
CVE-2026-8613 aThemes Addons for Elementor <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Widget Setting
The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'titletag' Widget Setting in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
PT-2026-48392
The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title tag' Widget Setting in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2026-25699
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and i...
CVE-2026-25699 Apache Answer: Authorization Bypass in Timeline API
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and i...
CVE-2026-25699
CVE-2026-25699 applies to Apache Answer up to version 2.0.0, where timeline-related APIs lacked proper authorization checks. This could allow regular authenticated users to access deleted, private, or unapproved content and its revision history. The issue is addressed by upgrading to version 2.0....
CVE-2026-25699 Apache Answer: Authorization Bypass in Timeline API
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and i...
CVE-2026-25699 Apache Answer: Authorization Bypass in Timeline API
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and i...
PT-2026-47713
Name of the Vulnerable Software and Affected Versions Apache Answer versions prior to 2.0.1 Description Timeline-related APIs lack proper authorization checks, which allows authenticated users to access content that is private, deleted, or unapproved, as well as its associated revision history...
Apache Answer 安全漏洞
Apache Answer is a community platform of the Apache Foundation in the United States. Versions of Apache Answer 2.0.0 and earlier contained security vulnerabilities. These vulnerabilities stemmed from insufficient authorization checks for time-line-related APIs, which could allow ordinary...
All the Ways Europe Is Ditching American Technology
A WIRED timeline shows how dozens of governments, companies, and other organizations across Europe are moving, or planning to shift, away from US Big Tech...
CVE-2026-11476
creationtimestamp| type| source ---|---|--- 2026-06-08 05:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqxjlapfc2f...
CVE-2026-8611
creationtimestamp| type| source ---|---|--- 2026-06-06 08:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnmawrkz5b2d 2026-06-12 14:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo3wj3n4xi26...
CVE-2026-6551
The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute of the timeline-blocks/tb-timeline-blocks block in all versions up to, and including, 1.1.10 due to insufficient input sanitization and output escaping on user supplied...
CVE-2026-11302
creationtimestamp| type| source ---|---|--- 2026-06-05 02:54:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnj55gfvnf2h 2026-06-05 13:24:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...
CVE-2026-44682
creationtimestamp| type| source ---|---|--- 2026-06-03 21:38:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mng2zcb7rm2s...
CVE-2025-58024
creationtimestamp| type| source ---|---|--- 2026-06-02 13:13:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncodowlfp2f 2026-06-04 08:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnh5tinftn2v...
CVE-2025-53440
creationtimestamp| type| source ---|---|--- 2026-06-02 13:10:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnco77fw722s 2026-06-03 07:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnejxj2l6m22 2026-06-03 11:39:39+00:00| seen|...