41431 matches found
CVE-2026-6262
creationtimestamp| type| source ---|---|--- 2026-05-05 12:53:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4a6airkd2v...
CVE-2026-43923
creationtimestamp| type| source ---|---|--- 2026-05-05 12:51:28+00:00| seen| https://bsky.app/profile/dubhead.bsky.social/post/3ml4a2pu6fk22...
CVE-2026-6963
creationtimestamp| type| source ---|---|--- 2026-05-05 12:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml46zuzgnt2c...
CVE-2026-6180
creationtimestamp| type| source ---|---|--- 2026-05-05 11:19:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml42vmaprd2v 2026-05-05 14:35:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml4fubobns2c...
CVE-2026-3454
creationtimestamp| type| source ---|---|--- 2026-05-05 10:54:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3zismlb22e...
CVE-2026-3601
creationtimestamp| type| source ---|---|--- 2026-05-05 10:46:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3z2g4dqg2o...
CVE-2026-6322
creationtimestamp| type| source ---|---|--- 2026-05-05 10:33:49+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3ml3yek4kos2b 2026-05-05 13:32:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml4cdh4uwn2w 2026-05-05 19:05:10+00:00| seen|...
EUVD-2026-27225
The GenerateBlocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.0. This is due to missing object-level authorization checks in the /wp-json/generateblocks/v1/dynamic-tag-replacements REST endpoint. The endpoint only verifies that...
CVE-2026-40797
creationtimestamp| type| source ---|---|--- 2026-05-05 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116520794744579709 2026-05-05 07:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ml3o4sriyd2j 2026-05-05 08:01:19+00:00| seen|...
CVE-2026-7822
creationtimestamp| type| source ---|---|--- 2026-05-05 07:16:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3nddb5ow2o...
CVE-2026-3454
The GenerateBlocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.0. This is due to missing object-level authorization checks in the /wp-json/generateblocks/v1/dynamic-tag-replacements REST endpoint. The endpoint only verifies that...
CVE-2026-6180
A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions involving dropped packets and out-of-order sequence counters, the server may incorrectly process fragmented data chunks. If a sequence reset notificatio...
CVE-2026-23863
creationtimestamp| type| source ---|---|--- 2026-05-05 07:11:11+00:00| seen| https://www.acn.gov.it/portale/w/whatsapp-rilevate-vulnerabilita-in-versioni-per-windows-e-ios/android 2026-05-05 13:21:57+00:00| seen| https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3ml4bqcdbab...
CVE-2026-23866
creationtimestamp| type| source ---|---|--- 2026-05-05 07:11:11+00:00| seen| https://www.acn.gov.it/portale/w/whatsapp-rilevate-vulnerabilita-in-versioni-per-windows-e-ios/android 2026-05-05 11:44:26+00:00| seen| https://bsky.app/profile/securestep9.bsky.social/post/3ml44ctvsok2g 2026-05-05...
CVE-2026-3456
creationtimestamp| type| source ---|---|--- 2026-05-05 06:51:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3lxtflxw2p 2026-05-05 19:21:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vulvr5y2z 2026-05-05 19:45:53+00:00| seen|...
CVE-2026-3454
The GenerateBlocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.0. This is due to missing object-level authorization checks in the /wp-json/generateblocks/v1/dynamic-tag-replacements REST endpoint. The endpoint only verifies that...
CVE-2026-3454
CVE-2026-3454 affects the WordPress plugin GenerateBlocks (versions <= 2.2.0). The vulnerability is an Insecure Direct Object Reference in the REST endpoint /wp-json/generateblocks/v1/dynamic-tag-replacements . The endpoint only checks user capability (edit_posts) and does not verify that the ...
CVE-2026-3454 GenerateBlocks <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag Replacements
The GenerateBlocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.0. This is due to missing object-level authorization checks in the /wp-json/generateblocks/v1/dynamic-tag-replacements REST endpoint. The endpoint only verifies that...
CVE-2026-3454 GenerateBlocks <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag Replacements
The GenerateBlocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.0. This is due to missing object-level authorization checks in the /wp-json/generateblocks/v1/dynamic-tag-replacements REST endpoint. The endpoint only verifies that...