40012 matches found
CVE-2026-14195 Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...
EUVD-2026-51717
The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after user registration to the newly created account, allowing unauthenticated attackers to obtain an authenticated session for an arbitrary existing user, including administrators, on...
CVE-2026-57429
creationtimestamp| type| source ---|---|--- 2026-08-01 05:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mryr7loq2b2g...
CVE-2026-58183
creationtimestamp| type| source ---|---|--- 2026-08-01 04:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrynhrhpkt2d...
CVE-2026-58182
creationtimestamp| type| source ---|---|--- 2026-08-01 04:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mryls4ou2w22...
CVE-2026-15403
creationtimestamp| type| source ---|---|--- 2026-08-01 04:06:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/edajbk4hcu7ak...
CVE-2026-13362
creationtimestamp| type| source ---|---|--- 2026-08-01 03:54:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gcdixbwv2q47d...
CVE-2026-58181
creationtimestamp| type| source ---|---|--- 2026-08-01 03:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mryk4ibonf2r...
CVE-2026-13362
The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via spformcode Post Meta in all versions up to, and including, 2.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2026-15414
The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.0.0. This is due to the savemetaboxes function persisting the wpsplanuserrole membership plan meta from $POST without an allowlist that excludes privileged roles — the...
CVE-2026-58184
creationtimestamp| type| source ---|---|--- 2026-08-01 02:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrygr6wph32r...
CVE-2026-13362 SendPulse Email Marketing Newsletter <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via _sp_form_code Post Meta
The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via spformcode Post Meta in all versions up to, and including, 2.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2026-13362
Technical details about CVE-2026-13362 are not publicly available in the provided documents. Monitor for updates; no concrete exploit vectors, affected versions, or remediation are confirmed here.
CVE-2026-13362
The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via spformcode Post Meta in all versions up to, and including, 2.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2026-15414
The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.0.0. This is due to the savemetaboxes function persisting the wpsplanuserrole membership plan meta from $POST without an allowlist that excludes privileged roles — the...
CVE-2026-54785
creationtimestamp| type| source ---|---|--- 2026-08-01 00:06:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fo7qlqdy3jspp 2026-08-01 00:31:31+00:00| seen| https://gist.github.com/alon710/dc2fc48bf583407e8cd73eba1edb4959...
PT-2026-67051
The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...
Preserving Restored InterSystems IRIS Data Before Removing a Storage System
Article Applicability This article expands on the following note from Epic EHR System Protection Restoring from Storage Snapshot in the Veeam Backup & Replication User Guide: Before you start the restore wizard, create an auxiliary host for the LUN mount in the storage system interface, using any...
CVE-2026-68770
creationtimestamp| type| source ---|---|--- 2026-07-31 21:57:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3nq3sqt35utpv 2026-07-31 22:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxxbyuldy2z 2026-07-31 22:06:06+00:00| seen|...