CVE-2026-14195

Summary: CVE-2026-14195 affects the Brizy WordPress plugin prior to 2.8.18. The issue is an authorization check gap on a request handler that returns post content, allowing users with the Contributor role or higher to read arbitrary posts, including private, pending, and draft posts from other us...

CVE-2026-14195 Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...

EUVD-2026-51717

The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after user registration to the newly created account, allowing unauthenticated attackers to obtain an authenticated session for an arbitrary existing user, including administrators, on...

CVE-2026-57429

creationtimestamp| type| source ---|---|--- 2026-08-01 05:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mryr7loq2b2g...

CVE-2026-58183

creationtimestamp| type| source ---|---|--- 2026-08-01 04:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrynhrhpkt2d...

CVE-2026-58182

creationtimestamp| type| source ---|---|--- 2026-08-01 04:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mryls4ou2w22...

CVE-2026-15403

creationtimestamp| type| source ---|---|--- 2026-08-01 04:06:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/edajbk4hcu7ak...

CVE-2026-13362

creationtimestamp| type| source ---|---|--- 2026-08-01 03:54:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gcdixbwv2q47d...

CVE-2026-58181

creationtimestamp| type| source ---|---|--- 2026-08-01 03:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mryk4ibonf2r...

CVE-2026-13362

The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via spformcode Post Meta in all versions up to, and including, 2.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-15414

The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.0.0. This is due to the savemetaboxes function persisting the wpsplanuserrole membership plan meta from $POST without an allowlist that excludes privileged roles — the...

CVE-2026-58184

creationtimestamp| type| source ---|---|--- 2026-08-01 02:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrygr6wph32r...

CVE-2026-13362 SendPulse Email Marketing Newsletter <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via _sp_form_code Post Meta

The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via spformcode Post Meta in all versions up to, and including, 2.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-13362

Technical details about CVE-2026-13362 are not publicly available in the provided documents. Monitor for updates; no concrete exploit vectors, affected versions, or remediation are confirmed here.

CVE-2026-15414

The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.0.0. This is due to the savemetaboxes function persisting the wpsplanuserrole membership plan meta from $POST without an allowlist that excludes privileged roles — the...

CVE-2026-13362

The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via spformcode Post Meta in all versions up to, and including, 2.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-54785

creationtimestamp| type| source ---|---|--- 2026-08-01 00:06:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fo7qlqdy3jspp 2026-08-01 00:31:31+00:00| seen| https://gist.github.com/alon710/dc2fc48bf583407e8cd73eba1edb4959...

VulnCheck KEV: CVE-2024-37014

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

PT-2026-67051

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

Preserving Restored InterSystems IRIS Data Before Removing a Storage System

Article Applicability This article expands on the following note from Epic EHR System Protection Restoring from Storage Snapshot in the Veeam Backup & Replication User Guide: Before you start the restore wizard, create an auxiliary host for the LUN mount in the storage system interface, using any...