GHSA-W7RQ-FGX4-4XCM

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:18+00:00| seen| https://gist.github.com/alon710/77a6fadcdbd2fb538108ea006d83f792...

GHSA-MXC8-4JQF-368Q

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:17+00:00| seen| https://gist.github.com/alon710/538f3bbaec01e73a79181c8d943a0a8b...

GHSA-XVMH-25JW-GMMM

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:16+00:00| seen| https://gist.github.com/alon710/b66f472b81e7bdba29ecc1785ea0bb4f...

GHSA-CCQ9-C5HV-CF64

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:10+00:00| seen| https://gist.github.com/alon710/c04d0150fe6489cd6aa0244c5949dba1...

GHSA-G54M-9F6G-WJ7Q

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:09+00:00| seen| https://gist.github.com/alon710/12a87bde6b1571c741d36ec36f95b2c8...

GHSA-F4WQ-6WW5-M56P

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:06+00:00| seen| https://gist.github.com/alon710/047e9957f2ab58798d9b9678f4c3043a...

CVE-2025-14947

The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxcallbackcreatebunnystreamvideo, ajaxcallbackgetbunnystreamvideo, and ajaxcallbackdeletebunnystreamvideo functions in all versions up to, and including,...

CVE-2026-1189

creationtimestamp| type| source ---|---|--- 2026-01-24 13:22:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md6coetxbm2c...

CVE-2025-13139

creationtimestamp| type| source ---|---|--- 2026-01-24 13:17:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md6cfgfuxh2m...

CVE-2026-1076

creationtimestamp| type| source ---|---|--- 2026-01-24 11:13:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md63ihrv252t...

CVE-2026-1081

creationtimestamp| type| source ---|---|--- 2026-01-24 10:58:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md62nmg5de2h...

CVE-2026-1302

creationtimestamp| type| source ---|---|--- 2026-01-24 10:31:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5z4lvsye2r...

CVE-2026-1088

creationtimestamp| type| source ---|---|--- 2026-01-24 09:56:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5x72nhnf2i...

CVE-2025-13139

The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.20. This is due to missing nonce validation on the SurveyJSAddSurvey AJAX action. This makes it possible for unauthenticated attackers to...

CVE-2025-13139 SurveyJS: Drag & Drop WordPress Form Builder <= 2.5.2 - Cross-Site Request Forgery to Survey Creation

The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2. This is due to missing nonce validation on the SurveyJSAddSurvey AJAX action. This makes it possible for unauthenticated attackers to crea...

CVE-2026-0687

Summary of CVE-2026-0687 (Meta-box GalleryMeta, WordPress) : The Meta-box GalleryMeta plugin is vulnerable to unauthorized data modification due to a missing capability check on the mb_gallery custom post type, affecting all versions up to and including 3.0.1. This allows authenticated attackers ...

CVE-2026-1103

CVE-2026-1103 affects the WordPress AIKTP plugin up to version 5.0.04. The vulnerability arises from missing authorization checks on the /aiktp/getToken REST endpoint, which uses verify_user_logged_in (only confirming login) and does not verify administrative capabilities. As a result, authentica...

CVE-2026-24642

creationtimestamp| type| source ---|---|--- 2026-01-24 07:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5ofgw4b72t...

CVE-2026-24649

creationtimestamp| type| source ---|---|--- 2026-01-24 07:04:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5nlrexbv2i...

CVE-2025-13952

creationtimestamp| type| source ---|---|--- 2026-01-24 03:49:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5cnwvpai2m 2026-01-26 17:08:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mddqbjzcsc2g 2026-01-26 17:09:03+00:00| seen|...