CVE-2018-25397

PHP-SHOP 1.0 is affected by a cross-site request forgery in the users.php endpoint. An unauthenticated attacker can craft a page with a hidden form that automatically POSTs parameters (name, email, password, permissions) to create an admin account, by convincing an authenticated administrator to ...

CVE-2026-49094

creationtimestamp| type| source ---|---|--- 2026-05-29 14:45:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmyrmbdqgh2a...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Projects component when displaying project tags and popovers in administrative detail views due to improper sanitization of user-supplied project names. An attacker can execute arbitrary scripts in the...

CVE-2025-41272

creationtimestamp| type| source ---|---|--- 2026-05-29 13:00:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmylqp4ykq2t 2026-06-22 07:01:35+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3moucvbux762v...

CVE-2025-41267

creationtimestamp| type| source ---|---|--- 2026-05-29 12:58:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmylnj34qv2e...

CVE-2026-9558

creationtimestamp| type| source ---|---|--- 2026-05-29 12:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyio2hges2e 2026-05-31 01:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn4ehkhlmf2h 2026-07-03 21:52:04+00:00| seen|...

CVE-2026-49197

creationtimestamp| type| source ---|---|--- 2026-05-29 11:45:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyhlin4q322 2026-06-22 06:31:54+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mouba73wwj22...

OESA-2026-2479 postgresql security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

CVE-2026-9243

creationtimestamp| type| source ---|---|--- 2026-05-29 09:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmybmmvksg2k...

CVE-2025-14042

creationtimestamp| type| source ---|---|--- 2026-05-29 09:23:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmy7m2nivs2x...

CVE-2026-6275

creationtimestamp| type| source ---|---|--- 2026-05-29 09:17:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmy7d45tjm2e...

CVE-2025-11993

creationtimestamp| type| source ---|---|--- 2026-05-29 09:13:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmy73gep4d2e 2026-05-29 12:20:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmyjjk3q7n2y 2026-05-31 03:01:34+00:00| seen|...

CVE-2026-3655

creationtimestamp| type| source ---|---|--- 2026-05-29 09:00:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmy6e4lrqw2y 2026-05-29 09:00:51+00:00| seen| https://infosec.exchange/users/offseq/statuses/116657044700520372 2026-05-29 09:49:06+00:00| seen|...

Bluetooth: hci_conn: fix potential UAF in create_big_sync

...

CVE-2026-49211

creationtimestamp| type| source ---|---|--- 2026-05-29 07:32:34+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmxzgmdwar2x...

CVE-2026-49208

creationtimestamp| type| source ---|---|--- 2026-05-29 07:32:21+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmxzg7aobq2u...

CVE-2026-8732

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

EUVD-2026-33251

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

CVE-2026-8732 WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

CVE-2026-8732

Summary of CVE-2026-8732 : The WP Maps Pro WordPress plugin (≤ 6.1.0) is vulnerable to unauthenticated privilege escalation via Administrator Account Creation. The root cause is the wpgmp_temp_access_ajax action registered for both authenticated and unauthenticated requests, protected only by a p...