CVE-2026-24402

creationtimestamp| type| source ---|---|--- 2026-01-24 03:05:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5aatfim52h...

CVE-2026-24405

creationtimestamp| type| source ---|---|--- 2026-01-24 01:21:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md52fi6pzp2a 2026-01-24 03:31:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5bnkbwzn2m...

PT-2026-4599

The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.20. This is due to missing nonce validation on the SurveyJS AddSurvey AJAX action. This makes it possible for unauthenticated attackers to...

CVE-2026-24572

creationtimestamp| type| source ---|---|--- 2026-01-23 23:57:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4vpfmtkv2m 2026-01-24 00:16:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4wqzvwfn27...

CVE-2025-70458

creationtimestamp| type| source ---|---|--- 2026-01-23 23:41:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4usqmo7f2n...

GHSA-RRQ5-R9H5-PC7C

creationtimestamp| type| source ---|---|--- 2026-01-23 23:21:31+00:00| seen| Telegram/6N4H89HKlQ25dlcUXQ6StZ2HC6hTVGf9cPWKhwEg02VLsDU...

CVE-2025-70458

A DOM-based Cross-Site Scripting XSS vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the...

CVE-2025-70390

creationtimestamp| type| source ---|---|--- 2026-01-23 22:15:21+00:00| seen| https://gist.github.com/syrex1013/4e48d04398339d05a77591dffec8a7e0...

CVE-2025-4620

creationtimestamp| type| source ---|---|--- 2026-01-23 21:26:08+00:00| seen| Telegram/BkMDNWJ5uBM3N87Jr673mIEkhOQ-NJ1VUOOYlPLpwywU5T0...

CVE-2025-67231

creationtimestamp| type| source ---|---|--- 2026-01-23 20:20:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4jlxk6pq2r...

CVE-2025-67229

creationtimestamp| type| source ---|---|--- 2026-01-23 19:54:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4i4nb35n2i 2026-01-23 20:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4ihy4ywt2h 2026-01-23 20:00:51+00:00| seen|...

GHSA-W7RQ-FGX4-4XCM LavaLite CMS affected by a stored cross-site scripting vulnerability

LavaLite CMS versions up to and including 10.1.0 contain a stored cross-site scripting vulnerability in the package creation and search functionality. Authenticated users can supply crafted HTML or JavaScript in the package Name or Description fields that is stored and later rendered without prop...

CVE-2026-22991

creationtimestamp| type| source ---|---|--- 2026-01-23 18:03:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4bwvpxzj2c 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-14947 All-in-One Video Gallery <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion

The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxcallbackcreatebunnystreamvideo, ajaxcallbackgetbunnystreamvideo, and ajaxcallbackdeletebunnystreamvideo functions in all versions up to, and including,...

CVE-2025-14947

The CVE-2025-14947 entry concerns the All-in-One Video Gallery WordPress plugin (versions up to 4.6.4). The vulnerability is a missing capability check in ajax_callback_create_bunny_stream_video, ajax_callback_get_bunny_stream_video, and ajax_callback_delete_bunny_stream_video, allowing unauthent...

CVE-2025-14947 All-in-One Video Gallery <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion

The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxcallbackcreatebunnystreamvideo, ajaxcallbackgetbunnystreamvideo, and ajaxcallbackdeletebunnystreamvideo functions in all versions up to, and including,...

CVE-2026-22978

creationtimestamp| type| source ---|---|--- 2026-01-23 17:18:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md47h24a6q23 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2026-22985

creationtimestamp| type| source ---|---|--- 2026-01-23 17:16:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md47cvqudc26...

CVE-2022-25369

An issue was discovered in Dynamicweb before 9.12.8. An attacker can add a new administrator user without authentication. This flaw exists due to a logic issue when determining if the setup phases of the product can be run again. Once an attacker is authenticated as the new admin user they have...

CVE-2026-22984

creationtimestamp| type| source ---|---|--- 2026-01-23 17:10:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md46y4gfdw2c 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...