6790 matches found
CVE-2026-22081
creationtimestamp| type| source ---|---|--- 2026-01-09 12:11:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbyhqra37a2o 2026-01-09 13:06:01+00:00| seen| Telegram/opgf19ZN09lKMlReRuv4TvW7wrTvF7qnMgMw4geluJ9eZ0 2026-01-09 14:14:28+00:00| seen|...
CVE-2025-13854 Curved Text <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
The Curved Text plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'radius' parameter of the arctext shortcode in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2023-4119
A vulnerability has been found in Academy LMS 6.0 and classified as problematic. This vulnerability affects unknown code of the file /academy/home/courses. The manipulation of the argument query/sortby leads to cross site scripting. The attack can be initiated remotely. VDB-235966 is the identifi...
CVE-2025-14782
creationtimestamp| type| source ---|---|--- 2026-01-09 09:09:55+00:00| seen| https://gist.github.com/Darkcrai86/b6e25ea05efbd65ed3b610555f4296ad...
CVE-2026-20974
creationtimestamp| type| source ---|---|--- 2026-01-09 08:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mby4isvv652r...
CVE-2026-20973
creationtimestamp| type| source ---|---|--- 2026-01-09 08:40:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mby3xhsfn62u...
CVE-2025-15057
creationtimestamp| type| source ---|---|--- 2026-01-09 08:03:00+00:00| seen| Telegram/baYAHbqMqSalDW7Jh5vLcnZYQr2csVL8CwQNknT-bM3nPo8 2026-01-09 08:41:55+00:00| seen| https://gist.github.com/Darkcrai86/3514d22fb35676a07c991248d6731f3a...
EUVD-2026-1779
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized course enrollment in all versions up to, and including, 3.9.3. This is due to a missing capability check and purchasability validation in the courseenrollment AJAX handler. This makes it possib...
CVE-2025-66315
creationtimestamp| type| source ---|---|--- 2026-01-09 05:19:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbxqqeskrz2c 2026-01-09 06:24:23+00:00| seen| https://social.circl.lu/users/cedric/statuses/115863706874317663...
CVE-2026-22519
creationtimestamp| type| source ---|---|--- 2026-01-08 18:14:24+00:00| seen| Telegram/jS0ooVdNUTpFuQPvf75JvaMZkwg-hXsWNQjJjHlHHfWiS0 2026-01-08 18:58:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbwnzdclm22o 2026-01-09 09:16:32+00:00| seen|...
CVE-2026-22521
creationtimestamp| type| source ---|---|--- 2026-01-08 18:01:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwktpwf5g2p 2026-01-08 18:14:37+00:00| seen| Telegram/xdg-QJnKsEB5s0EtEmLYsUys2VdWT9q-ssTNcLXUNMHZxI 2026-01-09 09:16:52+00:00| seen|...
CVE-2025-68151
creationtimestamp| type| source ---|---|--- 2026-01-08 17:15:19+00:00| seen| Telegram/GM-svWPekxp6fZc4gMlOvYkGHuylr07tc7mBU4KKuEApJ4 2026-01-08 17:15:40+00:00| seen| Telegram/KVWOQnBiY3Eem9HhxjtYUT7TdVna0GpQEMRBO0Jx4tvF1fc...
EUVD-2026-1486
OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all user-uploaded files, or upload new files...
CVE-2025-68887
creationtimestamp| type| source ---|---|--- 2026-01-08 12:39:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbvyt2keeo2u 2026-01-08 17:14:54+00:00| seen| Telegram/UlThGoX58f6Wkop7awnZC8Rf8gpxLvneuRy9futglmX9vHQ...
CVE-2025-67936
creationtimestamp| type| source ---|---|--- 2026-01-08 10:52:47+00:00| seen| https://gist.github.com/Darkcrai86/d0b211f0a8457fc530322b44e5a5d110 2026-01-08 20:17:13+00:00| seen| Telegram/w47kIH0sxRSSrSBHwBDF00w5O8NYeOGx2MIxQWlN9IrreIw 2026-01-08 20:41:26+00:00| seen|...
CVE-2025-68874
creationtimestamp| type| source ---|---|--- 2026-01-08 10:28:33+00:00| seen| https://gist.github.com/Darkcrai86/5c5965912c633226a27ad1629df01b77 2026-01-08 10:51:06+00:00| seen| https://gist.github.com/Darkcrai86/e95e49ad41679988a60dbc54c9d690f9 2026-01-08 12:54:12+00:00| seen|...
EUVD-2026-1580
The Gutenverse Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file upload in all versions up to, and including, 2.3.2. This is due to the plugin's framework component adding SVG to the allowed MIME types via the uploadmimes filter without implementing any...
EUVD-2026-1503
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jcaruso001 Flaming Password Reset flaming-password-reset allows Stored XSS.This issue affects Flaming Password Reset: from n/a through = 1.0.3...