64722 matches found
CVE-2026-12939 Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...
EUVD-2026-50096
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...
GHSA-2XMW-F8J8-WFXC
creationtimestamp| type| source ---|---|--- 2026-07-29 00:31:42+00:00| seen| https://gist.github.com/alon710/3def853e2525c617d6890d62679fbc37...
PT-2026-65692
The PhotoSwipe WordPress plugin through 4.1.1.1 uses the title attribute of author-supplied link markup as a lightbox caption that is written into the page DOM without escaping. Because the title attribute survives the post-content sanitization applied to users who lack the unfiltered html...
Fedora 43 : kronosnet (2026-56568b6fe8)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-56568b6fe8 advisory. CVE-2026-15811 LOW: encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicitbzero before...
CVE-2026-14958
creationtimestamp| type| source ---|---|--- 2026-07-28 23:34:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrql6dwnqr2i 2026-07-28 23:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlw6ttae23...
CVE-2026-15064
creationtimestamp| type| source ---|---|--- 2026-07-28 23:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqkmgz42s2j 2026-07-30 04:48:01+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...
CVE-2026-15325
creationtimestamp| type| source ---|---|--- 2026-07-28 22:52:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqitavyqz22 2026-07-29 15:09:20+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrs7fjz6hb27 2026-07-30 04:47:05+00:00| seen|...
CVE-2026-55390
creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:32+00:00| published-proof-of-concept| https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-442q-2j6p-642g 2026-07-28 23:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjc3tw4s2q...
CVE-2026-54719
creationtimestamp| type| source ---|---|--- 2026-07-28 22:30:56+00:00| seen| https://gist.github.com/alon710/9b8006195456ffdcd967a102fe0db5d4 2026-07-28 22:35:03+00:00| published-proof-of-concept| https://github.com/goshs-labs/goshs/security/advisories/GHSA-rmxw-pq4x-3fvh 2026-07-29 00:00:29+00:0...
GHSA-PP92-CRG2-GFV9
creationtimestamp| type| source ---|---|--- 2026-07-28 20:31:48+00:00| seen| https://gist.github.com/alon710/76a4f64bf3e94be3974678cdc55c68d9...
CVE-2026-51271
creationtimestamp| type| source ---|---|--- 2026-07-28 20:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqa6nmou724 2026-07-29 09:14:39+00:00| seen| https://gist.github.com/programmervuln/18c03cd805634bd9456d90c007a00b27 2026-07-29 16:03:17+00:00| seen|...
GHSA-85RG-P3FR-XC2F
creationtimestamp| type| source ---|---|--- 2026-07-28 19:31:15+00:00| seen| https://gist.github.com/alon710/543be0bac4447ae891730d56e63e4ffd...
CVE-2026-48388
creationtimestamp| type| source ---|---|--- 2026-07-28 19:22:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq53ijlk62q...
CVE-2026-51263
creationtimestamp| type| source ---|---|--- 2026-07-28 19:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4psk2dz2z 2026-07-29 04:03:07+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrr26aj6zb2t...
CVE-2026-48392
creationtimestamp| type| source ---|---|--- 2026-07-28 19:03:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3ys5trx2i...
CVE-2026-48395
creationtimestamp| type| source ---|---|--- 2026-07-28 18:47:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq35d7c4r23 2026-07-29 12:04:45+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrrv3heowi2d 2026-08-05 20:37:06+00:00| seen|...
CVE-2026-7362
creationtimestamp| type| source ---|---|--- 2026-07-28 18:44:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq2xiubaj2o...
CVE-2026-47768
CVE-2026-47768 affects nebula-mesh up to and including v0.3.1, where newly minted operator API keys are exposed in the redirect URL?new_key and related query strings. The root cause is tokens being placed in the URL during the handleOperatorCreateAPIKey flow, making them observable via the browse...