CVE-2026-54742

In Lemmy versions 0.19.18 through 0.19.19 and 1.0.0-alpha.20, the CollectionAdd::Featured and CollectionRemove handlers in crates/apub/activities/src/community/collection_add.rs and collection_remove.rs dereference self.object as an ApubPost and update featured_community without verifying post.co...

CVE-2026-66637

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

CVE-2026-66637 WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

CVE-2026-66637

Contributor-level users can inject unsanitized JavaScript into the WordPress Featured Video Plus plugin (versions ≤ 2.3.3), enabling stored XSS that executes in victims' browsers (CVSS 6.5, medium). No fix version or exploit details are provided; monitor the Patchstack advisory for updates.

EUVD-2026-60922

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

CVE-2026-66637

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Featured Video Plus versions = 2.3.3...

CVE-2026-73340

Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...

EUVD-2026-57909

Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...

CVE-2026-73340 WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...

CVE-2026-73340

The CVE covers a Cross Site Scripting (XSS) vulnerability in the WordPress plugin Featured Image from URL , affecting versions

PT-2026-71599

Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...

WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by luc in WordPress Plugin Featured Image from URL versions = 5.3.3...

CVE-2026-66685

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

CVE-2026-66685

The connected documents identify a vulnerability in the WordPress Featured Video Plus plugin, affected versions

CVE-2026-66685 WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

EUVD-2026-53896

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Featured Video Plus versions = 2.3.3...

CVE-2026-16069

The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted via an AJAX action, and later echoes them into HTML attributes in the post editor’s Featured Image meta box. This allows users with the Contributor role or above to inject arbitra...

CVE-2026-61970

Server-Side Request Forgery SSRF vulnerability in Themeisle Auto Featured Image Auto Post Thumbnail auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image Auto Post Thumbnail: from n/a through = 5.0.4...