EUVD-2026-51792

The CubeWP Framework plugin for WordPress is vulnerable to SQL Injection in all versions up to and including 1.1.30. This is due to insufficient input sanitization in the cubewpremoverelation AJAX function, specifically the use of wpunslash on the relationid parameter before interpolating it...

CVE-2026-6453

The CVE-2026-6453 issue affects the CubeWP Framework WordPress plugin (all versions ≤ 1.1.30). The root cause is insufficient input sanitization in cubewp_remove_relation() where wp_unslash() is applied to the relation_id parameter and then interpolated directly into a raw SQL query without using...

CVE-2026-6453 CubeWP Framework <= 1.1.30 - Authenticated (Subscriber+) SQL Injection via 'relation_id' Parameter

The CubeWP Framework plugin for WordPress is vulnerable to SQL Injection in all versions up to and including 1.1.30. This is due to insufficient input sanitization in the cubewpremoverelation AJAX function, specifically the use of wpunslash on the relationid parameter before interpolating it...

EUVD-2026-51742

The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to second-order SQL Injection via 'messagesid' Parameter in all versions up to, and including, 3.1.42 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

CVE-2026-16087 Icegram Engage <= 3.1.42 - Authenticated (Contributor+) Second-Order SQL Injection via 'messages[][id]' Parameter

The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to second-order SQL Injection via 'messagesid' Parameter in all versions up to, and including, 3.1.42 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

CVE-2026-16087

The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to second-order SQL Injection via 'messagesid' Parameter in all versions up to, and including, 3.1.42 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

BELL-CVE-2026-58039

Bulletin has no description...

GHSA-34RH-WP3J-6CXC

creationtimestamp| type| source ---|---|--- 2026-08-01 04:31:50+00:00| seen| https://gist.github.com/alon710/402cd5e451c20f1dfc47c5b8f0cf1ddb...

CVE-2026-13362

creationtimestamp| type| source ---|---|--- 2026-08-01 03:54:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gcdixbwv2q47d...

MINI-R6C6-2Q4P-2728

Bulletin has no description...

PT-2026-67342

The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to and including 2.8.7. This is due to the plugin's Apple login handler accepting the Apple id token and decoding only its base64 payload without verifying the JWT signature against Apple...

kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

CVE-2026-8347

creationtimestamp| type| source ---|---|--- 2026-07-31 22:00:02+00:00| seen| Telegram/CaZ2R0Efl1eBRVqO-sOZ66dFvtq0HENlFRwe45W-Oe0iQ 2026-08-01 00:00:10+00:00| seen| Telegram/CaZ2R0Efl1eBRVqO-sOZ66dFvtq0HENlFRwe45W-Oe0iQ...

@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag

Summary The @apostrophecms/seo package injects the Google Analytics Tracking ID seoGoogleTrackingId and Google Tag Manager ID seoGoogleTagManager directly into tag bodies using JavaScript template literals without any sanitization or validation. Any user with editor-level access the default role...

CVE-2025-69946

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters districtid , divisionid, regionid, and wardid...

CVE-2026-18420

creationtimestamp| type| source ---|---|--- 2026-07-31 21:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrxtxdxa7w2c 2026-08-20 22:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkapnkb7h22...

CVE-2026-62999

creationtimestamp| type| source ---|---|--- 2026-07-31 21:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxtwxnwbd2l 2026-08-01 00:15:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-62999...

GHSA-9HW9-CH79-4VH6 vulnerabilities

Vulnerabilities for packages: open-webui, superset, mlflow...

GHSA-659M-PX2C-25WJ vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-activemq, camunda, apache-nifi-registry, kafbat-ui-fips, apache-activemq-fips, jenkins, camunda-zeebe, kafbat-ui, apache-camel-karavan-devmode, zipkin...

CVE-2026-15976

creationtimestamp| type| source ---|---|--- 2026-07-31 20:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxrap7cbf2z 2026-08-01 20:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bevoq4c2f...