Ditty < 3.1.25 - Cross-Site Scripting

The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-4148 info: name: Ditty 3.1.25 ...

Joomla! Component News Portal 1.5.x - Local File Inclusion

A directory traversal vulnerability in the iJoomla News Portal comnewsportal component 1.5.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1312 info: name: Joomla! Component News Portal 1.5.x - Local File...

Ditty (formerly Ditty News Ticker) < 3.0.15 - Cross-Site Scripting

The Ditty formerly Ditty News Ticker WordPress plugin before 3.0.15 is affected by a Reflected Cross-Site Scripting XSS vulnerability. id: CVE-2022-0533 info: name: Ditty formerly Ditty News Ticker 3.0.15 - Cross-Site Scripting author: r3Y3r53 severity: medium description: | The Ditty formerly...

News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion

The News & Blog Designer Pack WordPress plugin up to version 3.4.1 contains a remote code execution caused by local file inclusion in the bdpgetmorepost function, letting unauthenticated attackers include arbitrary PHP files, exploit requires AJAX request with crafted POST data. id: CVE-2023-5815...

CVE-2026-62832

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:39+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 19:05:38+00:00| seen| https://bsky.app/profile/infosecbriefly.bsky.social/post/3mstcnzik6k22 2026-08-11 19:19:51+00:00| seen|...

CVE-2026-72599

Summary: CVE-2026-72599 affects e107 2.4.0 and is an SQL injection in the news item page ID parameter. The parameter is concatenated into a SQL WHERE clause without escaping, enabling unauthenticated remote attackers to read, modify, or delete all database contents (including administrator creden...

CVE-2026-19375 dmitriiweb article-scraper-mcp server.py fetch_article server-side request forgery

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetcharticle of the file newsscrapermcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now...

CVE-2026-19375

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetcharticle of the file newsscrapermcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now...

CVE-2026-64561

creationtimestamp| type| source ---|---|--- 2026-08-06 17:32:06+00:00| seen| https://bsky.app/profile/hn100.bsky.social/post/3msgl44wfgl2w 2026-08-06 17:34:01+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3msgl7locz625 2026-08-06 17:41:23+00:00| seen|...

CVE-2026-16496

creationtimestamp| type| source ---|---|--- 2026-08-05 15:00:06+00:00| seen| https://t.me/thehackernews/9717 2026-08-06 00:00:33+00:00| seen| https://t.me/thehackernews/9717...

CVE-2026-14869

creationtimestamp| type| source ---|---|--- 2026-08-05 15:00:06+00:00| seen| https://t.me/thehackernews/9717 2026-08-06 00:00:33+00:00| seen| https://t.me/thehackernews/9717...

MAL-2026-12882 Malicious code in bnpl-blocks-atom-bnpl-news-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcaf0c737c210018a282e73bbd1570e041a0c70f1043dcdd614e93ac64d8dd68 On require of this package, helpers.js selects a platform-specific URL, fetches an opaque binary from obfuscated Cloudflare Workers hosts...

Malicious code in bnpl-blocks-atom-bnpl-news-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcaf0c737c210018a282e73bbd1570e041a0c70f1043dcdd614e93ac64d8dd68 On require of this package, helpers.js selects a platform-specific URL, fetches an opaque binary from obfuscated Cloudflare Workers hosts...

CVE-2026-17583

creationtimestamp| type| source ---|---|--- 2026-08-03 10:00:38+00:00| seen| https://thehackernews.com/2026/08/thermo-fisher-patches-flaw-that-could.html 2026-08-03 10:01:31+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ms6ajowixy2u 2026-08-03 11:17:27+00:00|...

CVE-2019-13117

creationtimestamp| type| source ---|---|--- 2026-07-29 12:03:23+00:00| seen| https://t.me/linuxnews/592 2026-07-30 00:03:09+00:00| seen| https://t.me/linuxnews/592 2026-08-04 06:00:04+00:00| seen| https://t.me/linuxnews/592 2026-08-05 00:00:53+00:00| seen| https://t.me/linuxnews/592...

CVE-2026-60004

creationtimestamp| type| source ---|---|--- 2026-07-29 07:59:42+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrhfbohdx2w 2026-07-29 08:02:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mrrhkep54z23 2026-07-29 09:00:07+00:00| seen|...

CVE-2026-8167

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in THEWP Digital Solutions News Theme V8 allows Reflected XSS. This issue affects News Theme V8: through 16.06.2026...

CVE-2026-8167

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in THEWP Digital Solutions News Theme V8 allows Reflected XSS. This issue affects News Theme V8: through 16.06.2026...

CVE-2026-8167

CVE-2026-8167 describes a Reflected XSS vulnerability in THEWP Digital Solutions’ News Theme V8. The issue stems from improper neutralization of input during web page generation , enabling reflected cross-site scripting. Affected product: News Theme V8 (up to 16.06.2026). The documents do not pro...

CVE-2026-8167 Reflected XSS in theWP's News Theme V8

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in THEWP Digital Solutions News Theme V8 allows Reflected XSS. This issue affects News Theme V8: through 16.06.2026...