Combo Blocks < 2.2.76 - Improper Access Control

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not prevent password protected posts from being displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts id:...

WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting

WordPress amty-thumb-recent-post plugin 8.1.3 contains a cross-site scripting vulnerability via the query string to amtyThumbPostsAdminPg.php. id: CVE-2017-17059 info: name: WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress...

CVE-2026-18907

creationtimestamp| type| source ---|---|--- 2026-08-05 02:42:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iz6wskxiikwcm...

CVE-2026-18896

creationtimestamp| type| source ---|---|--- 2026-08-05 02:36:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bpk4apcdf5lm7...

CVE-2026-18856

creationtimestamp| type| source ---|---|--- 2026-08-05 02:27:48+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msci47xh4s2g...

CVE-2026-67861

creationtimestamp| type| source ---|---|--- 2026-08-05 00:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msc7va7zon2g...

CVE-2026-45537

creationtimestamp| type| source ---|---|--- 2026-08-04 23:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msc5bssods2l 2026-08-05 00:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msc7uzkyb62l 2026-08-05 03:22:39+00:00| seen|...

CVE-2026-70594

creationtimestamp| type| source ---|---|--- 2026-08-04 22:36:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6f6e3y6mttsbe 2026-08-05 01:31:27+00:00| seen| https://gist.github.com/alon710/a8f899d9b938031c01419f5cf3be4d0e...

CVE-2026-18813

creationtimestamp| type| source ---|---|--- 2026-08-04 21:49:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2lkjejcezmnlb...

EUVD-2026-39023

Ghost: Mobiledoc image-size fetch SSRF...

CVE-2026-70554

creationtimestamp| type| source ---|---|--- 2026-08-04 21:14:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwlcivoa2s 2026-08-04 22:07:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/j74eipql3yfb6 2026-08-05 00:00:37+00:00| seen|...

CVE-2026-70478

creationtimestamp| type| source ---|---|--- 2026-08-04 21:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwlb3shi23 2026-08-05 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/117040665415933315 2026-08-05 03:00:27+00:00| seen|...

CVE-2025-29296

creationtimestamp| type| source ---|---|--- 2026-08-04 21:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwhogkt22l...

CVE-2026-70588

CVE-2026-70588 affects the Ghost CMS (Node.js). From 5.26.0 through 6.54.1, the Universal Import feature in Ghost Admin did not properly sanitize imported content, causing an XSS in post content. The issue has been fixed in version 6.54.1. Affected versions should upgrade to 6.54.1 or later to re...

CVE-2026-70486

creationtimestamp| type| source ---|---|--- 2026-08-04 21:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvth5jkk2n 2026-08-04 22:35:16+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-3xpf-xq7r-v8c5...

CVE-2026-67592

creationtimestamp| type| source ---|---|--- 2026-08-04 20:12:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/7p5nbufssz34w...

CVE-2026-67591

creationtimestamp| type| source ---|---|--- 2026-08-04 20:06:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/ayo27b4c6lfg2...

CVE-2026-67590

creationtimestamp| type| source ---|---|--- 2026-08-04 20:00:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3xxd5lc2zvh3f...

CVE-2026-67465

creationtimestamp| type| source ---|---|--- 2026-08-04 19:42:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/2knjhf4ygmvex...

CVE-2026-49435

creationtimestamp| type| source ---|---|--- 2026-08-04 19:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbq3sut7l22 2026-08-04 20:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbsho4k232t...