CVE-2026-14845

Summary: The NewStatPress WordPress plugin before 1.4.5 is affected by an unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in the Top Post widget. Root cause: user input from unauthenticated visitor requests is not properly sanitized/escaped before storage and later output in the w...

CVE-2026-51371

creationtimestamp| type| source ---|---|--- 2026-07-31 05:02:47+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mrw6gqxai42n 2026-08-01 04:58:43+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mryoodbpnu2r...

CVE-2026-56673

ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folderpaths.getannotatedfilepath and existsannotatedfilepath join workflow-controlled annotated filenames to a base directory without a containment check, allowing an unauthenticated craft...

CVE-2026-57669

creationtimestamp| type| source ---|---|--- 2026-07-31 04:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrw5fetvn42q...

CVE-2026-6889

creationtimestamp| type| source ---|---|--- 2026-07-31 04:06:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/33eyaxae7jcoj...

CVE-2026-65423

creationtimestamp| type| source ---|---|--- 2026-07-31 04:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrw2yalby42q 2026-07-31 12:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwy7ln6sl2s 2026-07-31 12:46:04+00:00| seen|...

CVE-2026-66420

creationtimestamp| type| source ---|---|--- 2026-07-31 01:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvqvtqxt22a 2026-07-31 12:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwy427mt52i...

CVE-2026-51270

creationtimestamp| type| source ---|---|--- 2026-07-31 00:01:25+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrvnlus5te2e...

CVE-2026-62246

creationtimestamp| type| source ---|---|--- 2026-07-30 23:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvk6yfyz32g 2026-07-31 18:12:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrxkkywufs2i...

CVE-2026-55768

creationtimestamp| type| source ---|---|--- 2026-07-30 22:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i756bnxfs3slr...

CVE-2026-68502

creationtimestamp| type| source ---|---|--- 2026-07-30 22:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvgudm3vn23 2026-07-30 22:04:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvh244ih32q 2026-07-30 23:04:15+00:00| seen|...

CVE-2026-68500

creationtimestamp| type| source ---|---|--- 2026-07-30 22:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvgu5cuil2l...

CVE-2026-66803

creationtimestamp| type| source ---|---|--- 2026-07-30 20:58:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvde3fur622 2026-07-30 22:56:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/e6ukxlsbup2xn 2026-07-31 01:30:28+00:00| seen|...

CVE-2026-12946

creationtimestamp| type| source ---|---|--- 2026-07-30 20:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrva7vsnl622 2026-08-05 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mscly6623h2c...

CVE-2026-66416

Leantime 3.6.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to perform state-changing actions on behalf of authenticated users by excluding the Laravel VerifyCsrfToken middleware from the global middleware stack in app/Http/Kernel.php. Attackers can...

CVE-2026-51268

creationtimestamp| type| source ---|---|--- 2026-07-30 18:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv477ouem2k 2026-07-30 20:01:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrva6zooad2n...

CVE-2026-51261

creationtimestamp| type| source ---|---|--- 2026-07-30 18:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv476gfh42k...

CVE-2025-65340

creationtimestamp| type| source ---|---|--- 2026-07-30 18:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv43mio3a2s...

CVE-2025-69942

creationtimestamp| type| source ---|---|--- 2026-07-30 18:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv43l5oh42q...

CVE-2026-11885

creationtimestamp| type| source ---|---|--- 2026-07-30 18:44:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7ov45xoctyw2h 2026-07-30 19:52:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrv7pa6sqr2v...