CVE-2026-15100

CVE-2026-15100 details (concrete): The vulnerability affects the WordPress Post Grid Gutenberg Blocks feature within the PostX plugin, up to version 5.0.32. The root flaw is insufficient input sanitization and output escaping for the block attribute named 'searchnoresult'. This enables authentica...

EUVD-2026-48461

The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'searchnoresult' Block Attribute in all versions up to, and including, 5.0.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...

CVE-2026-15611

creationtimestamp| type| source ---|---|--- 2026-07-24 02:21:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrec5kav6v2p...

CVE-2026-15616

creationtimestamp| type| source ---|---|--- 2026-07-24 02:21:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrec5kav6v2p...

CVE-2026-62825

creationtimestamp| type| source ---|---|--- 2026-07-24 00:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3pkjytc2z 2026-07-24 03:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116972717625342012 2026-07-24 03:00:27+00:00| seen|...

PT-2026-64228

The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'searchnoresult' Block Attribute in all versions up to, and including, 5.0.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...

PT-2026-64227

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

PT-2026-64295

Stored Cross-Site Scripting CWE-79 in the OPC XML-DA server statistics in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to execute arbitrary JavaScript in an administrator's browser session hijacking,...

GHSA-8QQM-FP2Q-V734

creationtimestamp| type| source ---|---|--- 2026-07-23 23:59:46+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mre2ahctmm2e...

CVE-2026-16767

creationtimestamp| type| source ---|---|--- 2026-07-23 23:56:19+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mre22crxsq24...

CVE-2026-50032

creationtimestamp| type| source ---|---|--- 2026-07-23 22:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdtlyl5ca2o...

CVE-2026-63359

creationtimestamp| type| source ---|---|--- 2026-07-23 21:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdrcwptc322...

CVE-2026-65706

creationtimestamp| type| source ---|---|--- 2026-07-23 21:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdqaztedv2e...

CVE-2026-65705

creationtimestamp| type| source ---|---|--- 2026-07-23 21:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdqat2c2a2d...

CVE-2026-65761

creationtimestamp| type| source ---|---|--- 2026-07-23 20:56:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdpy36vpy24 2026-07-24 12:00:04+00:00| seen| https://t.me/GithubRedTeam/94954 2026-07-24 18:00:04+00:00| published-proof-of-concept|...

CVE-2026-61161

creationtimestamp| type| source ---|---|--- 2026-07-23 18:16:21+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-23 19:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdjm6y3ux23 2026-07-25 09:07:07+00:00| seen|...

CVE-2026-61155

creationtimestamp| type| source ---|---|--- 2026-07-23 18:16:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-23 19:00:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdjiqb5oz2i...

CVE-2026-61154

creationtimestamp| type| source ---|---|--- 2026-07-23 18:16:04+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-23 19:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdjiozk5724...

CVE-2026-61153

creationtimestamp| type| source ---|---|--- 2026-07-23 18:16:01+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-23 18:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdjezvohz2i...

CVE-2026-61146

creationtimestamp| type| source ---|---|--- 2026-07-23 18:15:48+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-23 18:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdjeyppnp24 2026-07-25 03:07:07+00:00| seen|...