CVE-2025-14675

creationtimestamp| type| source ---|---|--- 2026-03-07 09:27:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghj627mz72u...

CVE-2026-1086

creationtimestamp| type| source ---|---|--- 2026-03-07 09:25:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghj2ol5xk2o...

CVE-2026-1087

creationtimestamp| type| source ---|---|--- 2026-03-07 09:22:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghiuijmnm2o...

CVE-2026-30828

creationtimestamp| type| source ---|---|--- 2026-03-07 09:19:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghipubufg2o...

GHSA-PM4J-7R4Q-CCG8 Soroban: Muxed address<->ScVal conversions may break after a conversion failure

Summary Soroban host ensures that MuxedAddress objects can't be used as storage keys in order to proactively prevent the contract logic bugs. However, due to a bug in Soroban host implementation, a failure in Val-ScVal conversion during the storage key computation will have the flag indicating th...

CVE-2026-1650

The MDJM Event Management plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'customfieldscontroller' function in all versions up to, and including, 1.7.8.1. This makes it possible for unauthenticated attackers to delete arbitrary custom...

WordPress MDJM Event Management plugin <= 1.7.8.1 - Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion vulnerability

Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion vulnerability discovered by Legion Hunter in WordPress Plugin Mobile DJ Manager versions = 1.7.8.1...

CVE-2026-1650 MDJM Event Management <= 1.7.8.1 - Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion

The MDJM Event Management plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'customfieldscontroller' function in all versions up to, and including, 1.7.8.1. This makes it possible for unauthenticated attackers to delete arbitrary custom...

CVE-2026-1650 MDJM Event Management <= 1.7.8.1 - Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion

The MDJM Event Management plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'customfieldscontroller' function in all versions up to, and including, 1.7.8.1. This makes it possible for unauthenticated attackers to delete arbitrary custom...

CVE-2026-1650

The MDJM Event Management plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'customfieldscontroller' function in all versions up to, and including, 1.7.8.1. This makes it possible for unauthenticated attackers to delete arbitrary custom...

CVE-2026-1650

The CVE concerns the MDJM Event Management plugin for WordPress. A missing capability check in the custom_fields_controller allows unauthenticated attackers to modify data by deleting arbitrary custom event fields via delete_custom_field and id parameters. Affected versions include all up to 1.7....

PT-2026-23811

The MDJM Event Management plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'custom fields controller' function in all versions up to, and including, 1.7.8.1. This makes it possible for unauthenticated attackers to delete arbitrary custo...

Backstage 日志信息泄露漏洞

Backstage is an open-source application developed by Backstage. It serves as an open platform for building developer portals. Versions of Backstage prior to 3.1.4 contained a vulnerability related to log information leakage. This vulnerability stemmed from malicious scaffolding templates that cou...

WordPress plugin MDJM Event Management 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

CVE-2026-30833

creationtimestamp| type| source ---|---|--- 2026-03-06 19:10:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfzaxehuj2o...

Cross-site Scripting (XSS)

Overview defuddle is an Extract article content and metadata from web pages. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the findContentBySchemaText fallback in src/defuddle.ts. An attacker can execute arbitrary scripts in consuming applications extensions,...

CVE-2018-25197

creationtimestamp| type| source ---|---|--- 2026-03-06 14:56:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfl353bfx2o...

CVE-2018-25192

creationtimestamp| type| source ---|---|--- 2026-03-06 14:46:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfkja6cyt2v...

CVE-2018-25175

creationtimestamp| type| source ---|---|--- 2026-03-06 14:05:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfi7mely52n...

CVE-2026-30887

creationtimestamp| type| source ---|---|--- 2026-03-06 13:52:49+00:00| published-proof-of-concept| https://github.com/OneUptime/oneuptime/security/advisories/GHSA-h343-gg57-2q67 2026-03-12 15:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mguqcnbx7w2l...