WordPress SEATT: Simple Event Attendance plugin <= 1.5.0 - Cross-Site Request Forgery to Arbitrary Event Deletion vulnerability

Cross-Site Request Forgery to Arbitrary Event Deletion vulnerability discovered by MD. TAREQ AHAMED JONY itztrq - Knight Squad in WordPress Plugin SEATT: Simple Event Attendance versions = 1.5.0...

CVE-2026-26187

creationtimestamp| type| source ---|---|--- 2026-02-13 19:22:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mera4xe4ue27...

Djena_Bertrand

Description This the writeup on the challenges we solved duri...

GHSA-6V2J-VR4H-F632

creationtimestamp| type| source ---|---|--- 2026-02-13 10:40:38+00:00| seen| https://gist.github.com/alon710/f83d4d97a82b23b891984bf8ac3bf1de...

CVE-2026-24044

creationtimestamp| type| source ---|---|--- 2026-02-13 09:00:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meq5feqddv2f...

GHSA-G966-83W7-6W38

creationtimestamp| type| source ---|---|--- 2026-02-12 19:40:23+00:00| seen| https://gist.github.com/alon710/ddfcc9ce61b90942fef47df753b076d0 2026-02-25 01:08:02+00:00| seen| https://gist.github.com/alon710/b23e84fd74b0099ad7b9c6587db73222...

CVE-2026-2322

creationtimestamp| type| source ---|---|--- 2026-02-12 14:10:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3meo6aknzuu2e 2026-02-19 14:20:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mf7s27slzf2v 2026-03-12 03:00:12+00:00| seen|...

CVE-2025-30269

creationtimestamp| type| source ---|---|--- 2026-02-12 12:28:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3menykv7gkn2h...

CVE-2025-48724

creationtimestamp| type| source ---|---|--- 2026-02-12 11:30:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3menvbo7kam2o...

CVE-2025-39839

creationtimestamp| type| source ---|---|--- 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-64487

creationtimestamp| type| source ---|---|--- 2026-02-12 07:17:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3menh5pzd3k25 2026-03-06 20:09:04+00:00| seen| https://github.blog/security/how-to-scan-for-vulnerabilities-with-github-security-labs-open-source-ai-powered-framewo...

GHSA-WVCF-9XM8-7MRG

creationtimestamp| type| source ---|---|--- 2026-02-12 04:00:05+00:00| seen| https://gist.github.com/alon710/9ee8ed6e03428c4711cc07304c9dacce...

GHSA-GF3V-FWQG-4VH7

creationtimestamp| type| source ---|---|--- 2026-02-12 02:10:05+00:00| seen| https://gist.github.com/alon710/acaa62d2c9f4a729ff2d09cb5a58ff4d...

CVE-2026-1495

The vulnerability, if exploited, could allow an attacker with Event Log Reader S-1-5-32-573 privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server...

SUSE CVE-2026-24683

FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This...

Inspektor Gadget 安全漏洞

Inspektor Gadget is a set of tools and frameworks developed by Inspektor Gadget Inc. based on eBPF. Inspektor Gadget has a security vulnerability that arises from the string fields generated by eBPF events in list output mode. These strings are rendered onto the terminal without clearing control...

CVE-2017-10538

creationtimestamp| type| source ---|---|--- 2026-02-11 21:09:27+00:00| seen| https://gist.github.com/jonathan-gruber-1/49a25d08fb02011d3bf14466e69f89ba...

CVE-2026-2345

Proctorio Chrome Extension is a browser extension used for online proctoring. The extension contains multiple window.addEventListener'message', ... handlers that do not properly validate the origin of incoming messages. Specifically, an internal messaging bridge processes messages based solely on...

CVE-2019-25316

GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the event title parameter. Attackers can exploit the CreateEvent.php endpoint by sending crafted POST requests with XSS payloads to execute arbitrary...

CVE-2019-25316

GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the event title parameter. Attackers can exploit the CreateEvent.php endpoint by sending crafted POST requests with XSS payloads to execute arbitrary...