GHSA-8359-H9FX-J6V9

creationtimestamp| type| source ---|---|--- 2026-07-29 10:31:22+00:00| seen| https://gist.github.com/alon710/d0f3f961aeff39e79a8edafcd7786784...

CVE-2026-65883

creationtimestamp| type| source ---|---|--- 2026-07-29 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrrpsvcmvs2r 2026-07-29 12:36:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrwthfwyk2s 2026-07-31 00:00:05+00:00| seen|...

CVE-2026-59309

creationtimestamp| type| source ---|---|--- 2026-07-29 10:28:20+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrpp2orks23 2026-07-29 12:48:21+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrxjfggfg2z 2026-07-29 13:00:55+00:00| seen|...

CVE-2026-59310

creationtimestamp| type| source ---|---|--- 2026-07-29 10:28:20+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrpp2orks23 2026-07-29 12:48:21+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrxjfggfg2z 2026-07-29 13:00:55+00:00| seen|...

GHSA-RJRW-MJQ6-HPMM

creationtimestamp| type| source ---|---|--- 2026-07-29 08:31:18+00:00| seen| https://gist.github.com/alon710/b7d97e28e81c8217964934097e896a47...

CVE-2026-18197

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

CVE-2026-61826

creationtimestamp| type| source ---|---|--- 2026-07-29 08:01:20+00:00| seen| https://t.me/nxblog/1758 2026-07-30 00:02:09+00:00| seen| https://t.me/nxblog/1758 2026-08-01 20:00:05+00:00| published-proof-of-concept| https://t.me/nxblog/1758 2026-08-02 00:00:22+00:00| published-proof-of-concept|...

GHSA-FVCV-HH55-X3R4

creationtimestamp| type| source ---|---|--- 2026-07-29 08:01:20+00:00| seen| https://t.me/nxblog/1758 2026-07-30 00:02:09+00:00| seen| https://t.me/nxblog/1758 2026-08-01 20:00:05+00:00| published-proof-of-concept| https://t.me/nxblog/1758 2026-08-02 00:00:22+00:00| published-proof-of-concept|...

GHSA-HQ33-8JGP-8QQ3

creationtimestamp| type| source ---|---|--- 2026-07-29 07:31:46+00:00| seen| https://gist.github.com/alon710/5949a16fe56601aa95656371bd907946...

CVE-2026-63234

creationtimestamp| type| source ---|---|--- 2026-07-29 06:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrdpxnqzd22...

CVE-2026-18197

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

EUVD-2026-50165

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

CVE-2026-18197

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

CVE-2026-18197

CVE-2026-18197 affects Link Library prior to 7.9.4. The issue is an improper neutralization of input during web page generation, enabling Cross-Site Scripting (XSS). The connected documents do not provide details on exploited components, versions beyond the affected range, specific root causes be...

CVE-2026-18197

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

CVE-2026-63227

creationtimestamp| type| source ---|---|--- 2026-07-29 06:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrdis7ver2v...

GHSA-WG2Q-39H6-66X9

creationtimestamp| type| source ---|---|--- 2026-07-29 06:32:35+00:00| seen| https://gist.github.com/alon710/9b6eb86646df2d26df9c07ebf0051d99...

CVE-2026-17161

creationtimestamp| type| source ---|---|--- 2026-07-29 03:24:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqxzvrrpn2q...

CVE-2026-12939

The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...

CVE-2026-12939 Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute

The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...