CVE-2026-39670

Server-Side Request Forgery SSRF vulnerability in Brecht Visual Link Preview visual-link-preview allows Server Side Request Forgery.This issue affects Visual Link Preview: from n/a through = 2.3.0...

CVE-2026-39670

The CVE-2026-39670 entry describes a Server-Side Request Forgery (SSRF) in the Brecht Visual Link Preview WordPress plugin (visual-link-preview) affecting versions up to and including 2.3.0. Connected sources corroborate SSRF impact for Visual Link Preview:

CVE-2026-39466 WordPress Broken Link Checker plugin <= 2.4.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through = 2.4.7...

CVE-2026-39466

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through = 2.4.7...

CVE-2026-39466 WordPress Broken Link Checker plugin <= 2.4.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through = 2.4.7...

CVE-2026-39466

CVE-2026-39466 affects WordPress: WPMU DEV – Broken Link Checker plugin (versions

CVE-2018-16487

creationtimestamp| type| source ---|---|--- 2026-04-08 08:13:40+00:00| seen| https://gist.github.com/gnsehfvlr/37529bab9e5164db2b92082b17f124cf 2026-05-20 15:46:13+00:00| seen| https://gist.github.com/steig/ddd6193b319e8b70af8f2659034a7922...

CVE-2026-4333

creationtimestamp| type| source ---|---|--- 2026-04-08 08:01:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixtbbtzf52s...

CVE-2026-4379

creationtimestamp| type| source ---|---|--- 2026-04-08 07:40:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixs2xvmwp24...

CVE-2026-32496

creationtimestamp| type| source ---|---|--- 2026-04-08 07:30:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mixrjalkz22h...

CVE-2026-3600

creationtimestamp| type| source ---|---|--- 2026-04-08 07:27:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixreahevc2z...

CVE-2026-32527

creationtimestamp| type| source ---|---|--- 2026-04-08 05:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mixkspkerd2b...

CVE-2026-5726

creationtimestamp| type| source ---|---|--- 2026-04-08 04:23:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mixh3yunvl2p 2026-04-08 05:15:09+00:00| seen| Telegram/YYhJcFFLvqGqVRgyASu1q9Oze84gvZKQFNjoLIhh4vbEE 2026-04-16 10:00:00+00:00| seen|...

CVE-2026-27144

creationtimestamp| type| source ---|---|--- 2026-04-08 04:18:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixgtgp6sn25 2026-04-13 21:22:02+00:00| seen| Telegram/LHQfgYAbtuG7CogYZyWoKm7-py5GuHojGsIqn2GfOFcZFnQ 2026-05-07 18:20:11+00:00| seen|...

CVE-2026-28261

creationtimestamp| type| source ---|---|--- 2026-04-08 04:16:41+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-28261 2026-04-08 15:02:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miykrrqyr42i 2026-04-08 15:16:22+00:00| seen|...

CVE-2026-34781

creationtimestamp| type| source ---|---|--- 2026-04-08 00:19:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwzhg2zt42i...

GHSA-RFGH-63MG-8PWM pyload-ng has a WebUI JSON permission mismatch that lets ADD/DELETE users invoke MODIFY-only actions

Summary Several WebUI JSON endpoints enforce weaker permissions than the core API methods they invoke. This allows authenticated low-privileged users to execute MODIFY operations that should be denied by pyLoad's own permission model. Confirmed mismatches: - ADD user can reorder packages/files...

CVE-2026-39935

creationtimestamp| type| source ---|---|--- 2026-04-08 00:17:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwzdl4ks62z...

CVE-2026-4656

creationtimestamp| type| source ---|---|--- 2026-04-08 00:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwywfzpgf22...

GHSA-RQP3-GF5H-MRQX WWBN AVideo has Stored XSS via Malicious EPG XML Program Titles in AVideo EPG Page

Summary AVideo's EPG Electronic Program Guide feature parses XML from user-controlled URLs and renders programme titles directly into HTML without any sanitization or escaping. A user with upload permission can set a video's epglink to a malicious XML file whose elements contain JavaScript. This...