59036 matches found
CVE-2026-9360
creationtimestamp| type| source ---|---|--- 2026-05-24 09:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmllz5x2pp2m...
CVE-2021-47968
Podcast Generator 3.1 is vulnerable to persistent cross-site scripting, allowing authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the longdescription parameter. Attackers can inject script tags through episode creation or editing requests to execute...
CVE-2026-47280
creationtimestamp| type| source ---|---|--- 2026-05-23 12:32:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116623895926855718 2026-05-27 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmu2bqqi4p2f 2026-06-17 21:03:12+00:00| seen|...
CVE-2026-6898
creationtimestamp| type| source ---|---|--- 2026-05-23 06:51:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmiudlcyml2k 2026-06-06 11:02:52+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnmivyrxak2z...
Mass Assignment
Flowise is vulnerable to Mass Assignment. The vulnerability is due to insufficient validation and authorization checks in the evaluator create and update operations, where authenticated users can modify server-controlled properties to take over evaluators across workspaces...
CVE-2026-6897
The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember\Features\TeamAccounts::savesettings' function in all versions up to, and including, 3.30.1. This makes it possible for authenticated attackers, with...
CVE-2026-6898
The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember3Hooks::generateapikey' function in all versions up to, and including, 3.30.1. This makes it possible for authenticated attackers, with...
CVE-2026-6419
The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization in versions up to and including 3.30.1. This is due to the missing capability and nonce check in the ajaxgetscreen function. This makes it possible for authenticated attackers, with...
CVE-2026-6897 Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Update via 'wishlistmember_team_accounts_save_settings' AJAX action
The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember\Features\TeamAccounts::savesettings' function in all versions up to, and including, 3.30.1. This makes it possible for authenticated attackers, with...
CVE-2026-6897
The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember\Features\TeamAccounts::savesettings' function in all versions up to, and including, 3.30.1. This makes it possible for authenticated attackers, with...
EUVD-2026-31525
The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember\Features\TeamAccounts::savesettings' function in all versions up to, and including, 3.30.1. This makes it possible for authenticated attackers, with...
CVE-2026-6898 WishList Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Generate API Secret Key via 'wlm3_generate_api_key' AJAX action
The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember3Hooks::generateapikey' function in all versions up to, and including, 3.30.1. This makes it possible for authenticated attackers, with...
CVE-2026-40411
creationtimestamp| type| source ---|---|--- 2026-05-23 03:59:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmikpvbh6e2p 2026-05-27 19:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmuaycjlbz2y...
PT-2026-42866
Name of the Vulnerable Software and Affected Versions Wishlist Member versions prior to 3.30.2 Description The Wishlist Member plugin for WordPress allows unauthorized modification of data because of a missing capability check in the generate api key function. Authenticated attackers with...
PT-2026-42865
Name of the Vulnerable Software and Affected Versions Wishlist Member versions prior to 3.30.2 Description The Wishlist Member plugin for WordPress allows unauthorized modification of data because the save settings function in WishListMemberFeaturesTeam Accounts lacks a capability check...
CVE-2026-6406
creationtimestamp| type| source ---|---|--- 2026-05-22 23:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmi2oefbjz2r 2026-05-29 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmzfbhtkvr2x...
CVE-2026-9291
creationtimestamp| type| source ---|---|--- 2026-05-22 22:46:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhzb23z742o...
CVE-2026-9047
creationtimestamp| type| source ---|---|--- 2026-05-22 16:46:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhf4xkwxt2n 2026-06-06 11:02:52+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnmivyhkac2z...