CVE-2026-9714

creationtimestamp| type| source ---|---|--- 2026-05-29 09:43:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyapv6qjt2m...

CVE-2026-6275

creationtimestamp| type| source ---|---|--- 2026-05-29 09:17:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmy7d45tjm2e...

CVE-2025-11262

The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the userid parameter in all versions up to, and including, 0.9.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-49216

creationtimestamp| type| source ---|---|--- 2026-05-29 07:32:44+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmxzgupjrn2c...

CVE-2026-49211

creationtimestamp| type| source ---|---|--- 2026-05-29 07:32:34+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmxzgmdwar2x...

CVE-2025-11262

The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the userid parameter in all versions up to, and including, 0.9.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

EUVD-2025-209983

The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the userid parameter in all versions up to, and including, 0.9.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2025-11262 Link Whisper Free <= 0.9.0 - Unauthenticated Stored Cross-Site Scripting

The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the userid parameter in all versions up to, and including, 0.9.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2025-11262

The CVE concerns the WordPress plugin Link Whisper Free (up to version 0.9.0). It is an unauthenticated stored XSS via the REST endpoint where the attacker-supplied value in the user_id parameter is persisted and later rendered in the admin UI, enabling JavaScript execution when a privileged admi...

CVE-2025-11262 Link Whisper Free <= 0.9.0 - Unauthenticated Stored Cross-Site Scripting

The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the userid parameter in all versions up to, and including, 0.9.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2025-66391

creationtimestamp| type| source ---|---|--- 2026-05-29 06:28:20+00:00| seen| https://gist.github.com/mandeepsohal/be8266041311404f8c6fc4f5f2c38230...

CVE-2026-8995

creationtimestamp| type| source ---|---|--- 2026-05-29 05:14:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmxrpl42k42k...

CVE-2026-44655

creationtimestamp| type| source ---|---|--- 2026-05-29 03:29:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmxltmhdmb2w...

CVE-2026-7480

creationtimestamp| type| source ---|---|--- 2026-05-29 03:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmxka2lxrs2e 2026-05-29 03:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/116655628380153994 2026-05-29 05:09:25+00:00| seen|...

CVE-2026-7052

creationtimestamp| type| source ---|---|--- 2026-05-29 02:12:00+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmxhjein7r2e...

SUSE CVE-2026-9804

A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link symlink within an exported filesystem Persistent Volume Claim PVC that points...

SUSE CVE-2026-46125

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection prep fails If connection preparation fails for MLO connections, then the interface is completely reset to non-MLD. In this case, we must not keep the station since it's related to the...

GHSA-7HPG-FW6G-W3QJ

creationtimestamp| type| source ---|---|--- 2026-05-29 01:01:28+00:00| seen| https://gist.github.com/Nexory/f6bb07c8203741740b7413e3fb5b5c3e...

CVE-2026-9912

An inappropriate implementation flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499873765...

CVE-2026-6892

The CVE-2026-6892 entry concerns improper handling of symbolic links in the macOS installer for Canon CUPS Printer Driver (affecting Canon PIXUS iX6800 Series and MG2500 Series). The underlying issue is symbolic-links manipulation during installation, which could allow a local user with login pri...