EUVD-2026-39189

The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'postid' parameter in all versions up to, and including, 2.22.7 due to insufficient escaping on the user supplied parameter and lack of sufficie...

CVE-2026-12937

creationtimestamp| type| source ---|---|--- 2026-06-25 09:04:06+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mp4354jpuf2f 2026-06-25 22:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp5hfefa3x2l...

CVE-2026-12937

The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'postid' parameter in all versions up to, and including, 2.22.7 due to insufficient escaping on the user supplied parameter and lack of sufficie...

CVE-2026-12937

CVE-2026-12937 concerns the Tourfic WordPress plugin (versions ≤ 2.22.7). The issue is a generic SQL Injection via the post_id parameter caused by insufficient escaping and lack of prepared statements in the vulnerable SQL path. The vulnerability is exploitable by unauthenticated users, who can a...

CVE-2020-10374

creationtimestamp| type| source ---|---|--- 2026-06-25 06:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp3swbwyyt2n...

CVE-2026-10833

creationtimestamp| type| source ---|---|--- 2026-06-25 06:13:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3rmdu7rb24 2026-06-25 19:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp55dig6zs2w...

CVE-2020-11105

creationtimestamp| type| source ---|---|--- 2026-06-25 06:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp3ranflhb2a...

CVE-2026-3176

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 05:55:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3qkyscss2i 2026-06-25 12:00:27+00:00| seen|...

CVE-2026-0934

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:05+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:35:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3stwxgka2z 2026-06-25 12:00:27+00:00| seen|...

CVE-2026-45188

creationtimestamp| type| source ---|---|--- 2026-06-25 04:57:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp3neyzior2i...

CVE-2026-41566

creationtimestamp| type| source ---|---|--- 2026-06-25 04:52:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp3n3zxwyc2k 2026-06-25 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mp47xkc55u2l 2026-06-25 10:30:36+00:00| seen|...

CVE-2026-46752

creationtimestamp| type| source ---|---|--- 2026-06-25 04:42:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp3mk3hdhq2w 2026-06-25 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mp4eylvcab2b 2026-06-25 12:00:39+00:00| seen|...

CVE-2026-10043

creationtimestamp| type| source ---|---|--- 2026-06-25 02:41:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp3fq6z37d22...

CVE-2026-9154

creationtimestamp| type| source ---|---|--- 2026-06-25 02:34:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3ff2ruyq2l...

SUSE CVE-2026-53663

React Router is a router for React. From 7.12.0 until 7.15.1, certain CSRF checks in React Router v7 Framework Mode were insufficient and run on POST requests, but were bypassed on PUT/PATCH/DELETE requests. This is a low severity vulnerability because modern browser protections CORS preflight,...

CVE-2026-9787

creationtimestamp| type| source ---|---|--- 2026-06-25 02:13:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3e7gngza2o 2026-06-30 19:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpjp5yygla2u 2026-07-05 09:08:48+00:00| seen|...

CVE-2026-9773

creationtimestamp| type| source ---|---|--- 2026-06-25 01:58:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3dekt7jy2b 2026-06-30 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpjvulf32l2u...

CVE-2026-9782

creationtimestamp| type| source ---|---|--- 2026-06-25 01:32:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3bvqjsud2g 2026-06-30 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpjgrrwxou2v...

CVE-2020-15323

creationtimestamp| type| source ---|---|--- 2026-06-25 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp3ai6xceu2n...

PT-2026-52599

Name of the Vulnerable Software and Affected Versions wolfSSL affected versions not specified Description A TLS 1.3 post-handshake authentication PHA issue exists where a server may accept a client's Finished message even if the client has not provided a Certificate and CertificateVerify. This...