61657 matches found
CVE-2026-29067
ZITADEL (open source identity platform) has a CVE-2026-29067 vulnerability affecting the login V2 password reset flow in versions 4.0.0-rc.1 through 4.7.0. The issue arises from constructing the password reset URL using the Forwarded or X-Forwarded-Host header, which can enable an attacker to inf...
CVE-2026-1085
creationtimestamp| type| source ---|---|--- 2026-03-07 09:45:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghk6dhrk72u...
CVE-2026-1569
creationtimestamp| type| source ---|---|--- 2026-03-07 09:31:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghjfhx2nr2y...
EUVD-2026-10124
The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in inc/purchase-btn-options-page.php. This makes it possible for...
CVE-2025-14675
creationtimestamp| type| source ---|---|--- 2026-03-07 09:27:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghj627mz72u...
CVE-2026-1073
The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in inc/purchase-btn-options-page.php. This makes it possible for...
CVE-2026-1073 Purchase Button For Affiliate Link <= 1.0.2 - Cross-Site Request Forgery to Settings Update
The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in inc/purchase-btn-options-page.php. This makes it possible for...
CVE-2026-1073
The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in inc/purchase-btn-options-page.php. This makes it possible for...
CVE-2026-1073 Purchase Button For Affiliate Link <= 1.0.2 - Cross-Site Request Forgery to Settings Update
The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in inc/purchase-btn-options-page.php. This makes it possible for...
CVE-2026-2420
creationtimestamp| type| source ---|---|--- 2026-03-07 07:16:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-2420 2026-03-07 09:36:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghjo3zijs2v...
CVE-2026-1823
creationtimestamp| type| source ---|---|--- 2026-03-07 07:16:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-1823 2026-03-07 09:42:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghjyeglgb2e...
CVE-2026-1805
creationtimestamp| type| source ---|---|--- 2026-03-07 07:16:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-1805 2026-03-07 09:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghkf2fd4r2x...
CVE-2026-1820
creationtimestamp| type| source ---|---|--- 2026-03-07 07:16:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-1820 2026-03-07 09:39:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghjsyfvin2d...
CVE-2026-1824
creationtimestamp| type| source ---|---|--- 2026-03-07 07:16:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-1824 2026-03-07 10:18:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghlzhzu522e...
CVE-2026-2722
creationtimestamp| type| source ---|---|--- 2026-03-07 03:52:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggwgp667324...
CVE-2026-2429
creationtimestamp| type| source ---|---|--- 2026-03-07 03:42:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggvusd36s2u...
CVE-2026-2431
creationtimestamp| type| source ---|---|--- 2026-03-07 03:37:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggvltvlbz2u...
CVE-2026-3352
creationtimestamp| type| source ---|---|--- 2026-03-07 03:32:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggvcvhpun2n...
CVE-2026-2721
creationtimestamp| type| source ---|---|--- 2026-03-07 03:28:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggv37wbek27...
CVE-2026-2488
creationtimestamp| type| source ---|---|--- 2026-03-07 03:15:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggue6pzdg2o...