40910 matches found
CVE-2026-9662
The Recover Exit For WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to and including 1.0.3. This is due to insufficient validation and sanitization of the user-controlled tpf POST parameter before it is used in an include path in the recoverexit function...
CVE-2026-8365
The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksymeta' REST API field and the V200 database migration in versions up to and including 2.1.35. This is due to insufficient input sanitization in the blocksysanitizepostmetaoptions...
CVE-2025-8444
creationtimestamp| type| source ---|---|--- 2026-06-10 08:36:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwcmlm4e42l 2026-06-10 18:16:30+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnxcz3qmg42s...
GHSA-62WX-5F55-W8G2
creationtimestamp| type| source ---|---|--- 2026-06-10 08:20:23+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mnwbp5imih22...
CVE-2026-9019
The Easy Image Collage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gridpropertiesborderColor' and 'gridimagesNattachmenturl' Parameters in all versions up to, and including, 1.13.6 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-47921
creationtimestamp| type| source ---|---|--- 2026-06-10 08:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwalzqkz62p 2026-06-10 14:14:55+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnwvj2vwsu2k...
CVE-2026-47952
creationtimestamp| type| source ---|---|--- 2026-06-10 08:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwalsmozx2v...
EUVD-2026-35995
The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'memo' parameter in all versions up to, and including, 5.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access and above,...
CVE-2026-8853 MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameter
The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'memo' parameter in all versions up to, and including, 5.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access and above,...
CVE-2026-53435
creationtimestamp| type| source ---|---|--- 2026-06-10 07:43:47+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-nuove-vulnerabilita-in-jenkins-1 2026-06-12 21:00:04+00:00| published-proof-of-concept| Telegram/8OrsKfIYkEk0-8uPkb8MstgNwn2ZcQVuOnxP5IJIO77AEwY 2026-06-15 12:35:16+00:00| seen|...
EUVD-2026-35993
The Easy Image Collage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gridpropertiesborderColor' and 'gridimagesNattachmenturl' Parameters in all versions up to, and including, 1.13.6 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2025-62851
creationtimestamp| type| source ---|---|--- 2026-06-10 05:49:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvzblb5bo2v 2026-06-17 12:00:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j 2026-06-18 03:38:08+00:00| seen|...
CVE-2025-66280
creationtimestamp| type| source ---|---|--- 2026-06-10 05:44:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvyymqodc2p 2026-06-17 12:00:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j 2026-06-23 18:00:00+00:00| seen|...
CVE-2026-24720
creationtimestamp| type| source ---|---|--- 2026-06-10 05:39:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvypnmdxo24 2026-06-17 12:00:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j 2026-06-23 18:00:00+00:00| seen|...
CVE-2025-66281
creationtimestamp| type| source ---|---|--- 2026-06-10 05:30:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvy6zbtrz2h 2026-06-17 12:00:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j 2026-06-23 18:00:00+00:00| seen|...
CVE-2026-24716
creationtimestamp| type| source ---|---|--- 2026-06-10 05:26:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvxycbtn72m 2026-06-30 02:30:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphxhebohf2d...
CVE-2026-45542
creationtimestamp| type| source ---|---|--- 2026-06-10 05:20:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvxmwhb362l...
CVE-2026-26239
creationtimestamp| type| source ---|---|--- 2026-06-10 05:14:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvxdjxf4o2h 2026-06-17 12:00:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j 2026-06-23 18:00:00+00:00| seen|...
CVE-2026-24724
creationtimestamp| type| source ---|---|--- 2026-06-10 05:12:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvx7flg2b2f 2026-06-17 12:00:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j 2026-06-23 18:00:00+00:00| seen|...