EUVD-2026-48198

Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...

EUVD-2026-48186

Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...

CVE-2026-57735 WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Breakdance = 2.7.1 versions...

CVE-2026-57716

CVE-2026-57716 affects the WordPress plugin WordPress Broadcast Live Video (VideoWhisper Live Streaming Integration)

EUVD-2026-48176

Unauthenticated Arbitrary File Deletion in Broadcast Live Video = 7.2.4 versions...

CVE-2026-57397 WordPress Coaching theme <= 3.9.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Coaching = 3.9.2 versions...

CVE-2026-27422

The CVE-2026-27422 entry concerns the WordPress YT Player plugin (versions

CVE-2026-27399 WordPress MarketKing plugin <= 2.1.40 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in MarketKing = 2.1.40 versions...

EUVD-2026-48157

Unauthenticated Broken Access Control in MarketKing = 2.1.40 versions...

CVE-2026-24552 WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This issue affects Create: from n/a through 2.5.3...

EUVD-2026-48144

Contributor SQL Injection in Create by Mediavine = 2.5.3 versions...

EUVD-2025-210505

Administrator Cross Site Scripting XSS in WP-Polls = 2.77.3 versions...

WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.10.0 - Unknown vulnerability

Unknown vulnerability discovered by dodoh4t in WordPress Plugin Falcon – WordPress Optimizations & Tweaks versions = 2.10.0...

CVE-2026-15015

creationtimestamp| type| source ---|---|--- 2026-07-23 10:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116968824938837459 2026-07-23 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrcmzeb6it2i 2026-07-23 13:58:05+00:00| seen|...

RHSA-2026:42089 Red Hat Security Advisory: glib2 security update

Bulletin has no description...

RHSA-2026:42080 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

Bulletin has no description...

RHSA-2026:41947 Red Hat Security Advisory: nodejs:22 security, bug fix, and enhancement update

Bulletin has no description...

WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability

2FA Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Hide My WP Ghost versions = 7.0.06...

CVE-2026-15394 Header Footer Script Adder <= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'asm_code' Snippet Meta

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

WordPress TemplateSpare plugin <= 4.2.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin TemplateSpare versions = 4.2.2...