41444 matches found
PT-2026-36607
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'map post type' parameter in all versions up to, and including, 1.13.18. This is due to the SearchResults hook explicitly calling stripslashes deep$ POST which removes WordPress magic quotes protection, followed...
WordPress plugin Geo Mashup SQL注入漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
CVE-2026-44007
creationtimestamp| type| source ---|---|--- 2026-05-01 21:29:07+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-8hg8-63c5-gwmx 2026-05-05 18:39:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml4tiejjgf2s 2026-05-22 22:37:06+00:0...
CVE-2026-35514
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, the endpoint POST /user/invited does not validate any invite token, authentication header, or session. Any unauthenticated attacker can call this endpoi...
CVE-2026-7567
creationtimestamp| type| source ---|---|--- 2026-05-01 11:11:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrymnukmi2p 2026-05-02 08:00:04+00:00| seen| https://t.me/GithubRedTeam/82445 2026-05-02 11:00:10+00:00| seen| Telegram/tQatHScNUYuJveIo384qXaKUGUcjtuIRc0ZjHeoPypmQ...
CVE-2026-43001
creationtimestamp| type| source ---|---|--- 2026-05-01 10:56:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrxrsdamf2i 2026-05-28 21:13:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmwwsrnh6g2z...
CVE-2026-42403
creationtimestamp| type| source ---|---|--- 2026-05-01 10:55:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrxpyqkym2i...
CVE-2026-40201
creationtimestamp| type| source ---|---|--- 2026-05-01 10:50:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrxh26lwc2q...
WordPress Carousel, Recent Post Slider and Banner Slider plugin <= 2.1 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Spice Post Slider versions = 2.1...
WordPress Pay For Post with WooCommerce plugin <= 3.1.26 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Pay For Post with WooCommerce versions = 3.1.26...
WordPress Post List Designer – Category Post, Recent Post, Post List plugin <= 3.3.7 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Posts List Designer by Category – List Category Posts Or Recent Posts versions = 3.3.7...
WordPress Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider plugin <= 3.2.7 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Post Slider and Carousel with Widget – A Responsive Post Slider versions = 3.2.7...
WordPress Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin <= 3.0.0 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Post SMTP versions = 3.0.0...
CVE-2026-43001
An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not validate that the caller-supplied projectid for an EC2-type credential matched the project of the authenticating application credential. This allowed an attacker holding an unrestricted application credentia...
UBUNTU-CVE-2026-43001
An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not validate that the caller-supplied projectid for an EC2-type credential matched the project of the authenticating application credential. This allowed an attacker holding an unrestricted application credentia...
WordPress WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin <= 3.8.3 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin WP Post Author versions = 3.8.3...
CVE-2024-13362
creationtimestamp| type| source ---|---|--- 2026-05-01 06:54:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrkanvanl2i 2026-05-04 22:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml2q3tjkdc2i 2026-05-04 23:33:06+00:00| seen|...
CVE-2026-7549
creationtimestamp| type| source ---|---|--- 2026-05-01 06:49:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrjxp7ait2i...