WordPress Twentig plugin <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'featuredImageSizeWidth' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'featuredImageSizeWidth' vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Twentig Supercharged Block Editor versions = 1.9.7...

CVE-2026-21975

creationtimestamp| type| source ---|---|--- 2026-01-20 23:48:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcvdss4f272g 2026-01-21 08:16:57+00:00| seen| https://gist.github.com/Darkcrai86/58c524eb3766770755055392d271183e 2026-01-21 16:30:19+00:00| seen|...

CVE-2024-33269

SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method...

INSMA Wifi Mini Spy 1080P HD Security IP Camera 跨站请求伪造漏洞

INSMA Wifi Mini Spy 1080P HD Security IP Camera is a camera from INSMA USA. The INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to access the web via all fields...