23615 matches found
CVE-2026-7459 Simple History – Track, Log, and Audit WordPress Changes <= 5.26.0 - Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpoint
The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated Subscriber+ account takeover in all versions up to, and including, 5.26.0 via the event reaction endpoints reacttoevent / unreacttoevent. The endpoints register getitemspermissionschec...
WordPress plugin Simple History 授权问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-45088
Name of the Vulnerable Software and Affected Versions Simple History versions prior to 5.26.1 Description The Simple History plugin for WordPress allows authenticated users with Subscriber-level permissions or higher to take over accounts. The issue exists in the event reaction endpoints...
CVE-2026-47266
creationtimestamp| type| source ---|---|--- 2026-05-29 22:08:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzkfldrxk25...
CVE-2026-45151
creationtimestamp| type| source ---|---|--- 2026-05-29 21:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzj2gvkuo2d...
CVE-2026-44420
creationtimestamp| type| source ---|---|--- 2026-05-29 21:01:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzgnhigoh2v 2026-05-30 13:56:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116663869287019686...
HaxCMS has a stored Cross-Site Scripting (XSS) bypass in its saveNode endpoint
Summary HaxCMS is affected by a stored cross-site scripting XSS vulnerability in the /system/api/saveNode endpoint. An authenticated user with a permission to edit pages can bypass the HTML sanitizer by injecting an event handler attribute without whitespace before the attribute name. For example...
CVE-2026-48527
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions up to and including 26.0.0 are affected by a stored cross-site scripting XSS vulnerability in the /system/api/saveNode endpoint. An authenticated user with a permission to edit pages can bypass the HTML sanitizer by...
CVE-2025-41272
creationtimestamp| type| source ---|---|--- 2026-05-29 13:00:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmylqp4ykq2t 2026-06-22 07:01:35+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3moucvbux762v...
CVE-2025-41267
creationtimestamp| type| source ---|---|--- 2026-05-29 12:58:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmylnj34qv2e...
CVE-2026-48527
HAX CMS (PHP/NodeJS backends) is affected up to version 26.0.0 by a stored XSS in the /system/api/saveNode endpoint. An authenticated user with page-edit permissions can bypass the HTML sanitizer by injecting an event handler attribute without whitespace before the attribute name. Affected compon...
CVE-2026-49197
creationtimestamp| type| source ---|---|--- 2026-05-29 11:45:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyhlin4q322 2026-06-22 06:31:54+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mouba73wwj22...
Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt
...
ipmi: Add limits to event and receive message requests
...
ipmi: Check event message buffer response for bad data
...
SUSE CVE-2026-46128
In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message buffer response for bad data The event message buffer response data size got checked later when processing, but check it right after the response comes back. It appears some BMCs may return an empty...
SUSE CVE-2026-46138
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix OOB read and infinite loop in hcilecreatebigcompleteevt hcilecreatebigcompleteevt iterates over BTBOUND connections for a BIG handle using a while loop, accessing ev-bishandlei++ on each iteration. Howeve...
SUSE CVE-2026-46177
In the Linux kernel, the following vulnerability has been resolved: ipmi: Add limits to event and receive message requests The driver would just fetch events and receive messages until the BMC said it was done. To avoid issues with BMCs that never say they are done, add a limit of 10 fetches at a...
SUSE CVE-2026-46181
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4srqevent Sashiko points out the radixtree itself is RCU safe, but nothing ever frees the mlx4srq struct with RCU, and it isn't even accessed within the RCU critical section. It also will crash...