CVE-2026-15010

creationtimestamp| type| source ---|---|--- 2026-07-11 07:37:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5qoz5cx22 2026-07-11 07:37:19+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqe5qog3a22o 2026-07-11 08:07:12+00:00| seen|...

CVE-2026-1382

creationtimestamp| type| source ---|---|--- 2026-07-11 07:35:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe5nsp6du26 2026-07-11 07:37:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5rdvvic2x...

CVE-2026-12738

creationtimestamp| type| source ---|---|--- 2026-07-11 07:32:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe5ibgnnh27 2026-07-11 07:34:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5madgpn2e...

EUVD-2026-43164

The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.4 via the setupSources function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2026-7655

creationtimestamp| type| source ---|---|--- 2026-07-11 06:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116899815763339331 2026-07-11 06:00:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqdydvch3z2d 2026-07-11 06:31:25+00:00| seen|...

CVE-2026-6939

The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'approvalcode' parameter in all versions up to, and including, 2.7.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

CVE-2026-11901

Affected software: WordPress WP Hotel Booking plugin (versions ≤ 2.3.1). Vulnerability: Insufficient Verification of Data Authenticity in the PayPal IPN handler (web_hook_process_paypal_standard). The IPN validation endpoint can be chosen from attacker-controlled test_ipn, permitting force-upgrad...

CVE-2026-11901

The WP Hotel Booking plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 2.3.1. This is due to the webhookprocesspaypalstandard IPN handler selecting its PayPal validation endpoint from the attacker-controlled $REQUEST'testipn...

CVE-2026-15097

creationtimestamp| type| source ---|---|--- 2026-07-11 05:29:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdwmozpdg2s 2026-07-11 05:29:50+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqdwmp6lvc2o 2026-07-13 23:51:01+00:00| seen|...

CVE-2026-15096

creationtimestamp| type| source ---|---|--- 2026-07-11 05:27:40+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqdwiu3p3x2m 2026-07-11 05:27:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdwiu4qbf2d 2026-07-14 00:12:06+00:00| seen|...

CVE-2026-15338

creationtimestamp| type| source ---|---|--- 2026-07-11 04:42:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdtxhnb7y2y 2026-07-11 05:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqduyrtsfv2k 2026-07-13 00:00:20+00:00| seen|...

CVE-2026-13353

creationtimestamp| type| source ---|---|--- 2026-07-11 04:40:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdtuqz2qt27 2026-07-11 05:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqduyyvv3g25 2026-07-11 06:37:34+00:00| seen|...

Injection axios Dependency in Confluence Data Center

This High severity Injection vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Injection vulnerability, with a CVSS Score of 7.4 and a CVSS Vector of CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N allows an...

Information Disclosure axios Dependency in Confluence Data Center

This High severity Information Disclosure vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Information Disclosure vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

SUSE CVE-2026-59887

linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by .test and .match can be invoked at every mailto: occurrence and scan the remaining input through srcemailname in lib/re.mjs, causing On^2 CPU consumption on crafted user text...

CVE-2026-15080

creationtimestamp| type| source ---|---|--- 2026-07-11 03:15:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdp4z5ww52s 2026-07-11 03:15:47+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqdp4z55v62o...

CVE-2026-57213

creationtimestamp| type| source ---|---|--- 2026-07-11 02:29:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdmkhpe7k2e 2026-07-11 02:29:40+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqdmkl4iz72o 2026-07-13 23:25:09+00:00| seen|...

CVE-2026-57212

creationtimestamp| type| source ---|---|--- 2026-07-11 02:29:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdmjxo5sz2y 2026-07-11 02:29:20+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqdmjxhqyy26 2026-07-13 23:20:17+00:00| seen|...

CVE-2026-15301

creationtimestamp| type| source ---|---|--- 2026-07-11 00:55:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhctfuzp2c 2026-07-11 00:55:53+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqdhcuf6pi2k...

CVE-2026-57476

creationtimestamp| type| source ---|---|--- 2026-07-11 00:25:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfl3aug72c 2026-07-11 00:25:10+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqdflcrbke2d...