41850 matches found
CVE-2026-13464
The CVE concerns Kirki for WordPress (
CVE-2026-13464
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...
CVE-2026-13464 Kirki <= 6.0.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'context' Parameter
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...
EUVD-2026-48463
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...
CVE-2026-15100
The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'searchnoresult' Block Attribute in all versions up to, and including, 5.0.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2026-15100 Post Grid Gutenberg Blocks <= 5.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'searchnoresult' Block Attribute
The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'searchnoresult' Block Attribute in all versions up to, and including, 5.0.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2026-15100
CVE-2026-15100 details (concrete): The vulnerability affects the WordPress Post Grid Gutenberg Blocks feature within the PostX plugin, up to version 5.0.32. The root flaw is insufficient input sanitization and output escaping for the block attribute named 'searchnoresult'. This enables authentica...
EUVD-2026-48461
The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'searchnoresult' Block Attribute in all versions up to, and including, 5.0.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2026-15616
creationtimestamp| type| source ---|---|--- 2026-07-24 02:21:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrec5kav6v2p...
CVE-2026-15611
creationtimestamp| type| source ---|---|--- 2026-07-24 02:21:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrec5kav6v2p...
CVE-2026-62825
creationtimestamp| type| source ---|---|--- 2026-07-24 00:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3pkjytc2z 2026-07-24 03:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116972717625342012 2026-07-24 03:00:27+00:00| seen|...
PT-2026-64295
Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.17 Loytec L-INX versions prior to 8.4.17 Loytec L-GATE versions prior to 8.4.17 Loytec L-ROC versions prior to 8.4.17 Loytec L-IOB versions prior to 8.4.17 Loytec L-DALI versions prior to 8.4.17 Loytec...
PT-2026-64228
The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'searchnoresult' Block Attribute in all versions up to, and including, 5.0.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
PT-2026-64227
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...
GHSA-8QQM-FP2Q-V734
creationtimestamp| type| source ---|---|--- 2026-07-23 23:59:46+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mre2ahctmm2e...
CVE-2026-16767
creationtimestamp| type| source ---|---|--- 2026-07-23 23:56:19+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mre22crxsq24...
CVE-2026-50032
creationtimestamp| type| source ---|---|--- 2026-07-23 22:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdtlyl5ca2o...
CVE-2026-63359
creationtimestamp| type| source ---|---|--- 2026-07-23 21:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdrcwptc322...