CVE-2026-33980

creationtimestamp| type| source ---|---|--- 2026-03-25 20:38:27+00:00| published-proof-of-concept| https://github.com/pab1it0/adx-mcp-server/security/advisories/GHSA-vphc-468g-8rfp 2026-03-27 22:19:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi35m2lzdf2m 2026-03-27...

curl: Security Vulnerability Report: Protocol Injection via Programmatic Options

Summary Multiple text-based protocol handlers in libcurl including FTP, SMTP, POP3, and IMAP are vulnerable to protocol command injection. This occurs when an application sets credentials or other protocol-specific options programmatically e.g., via CURLOPTUSERNAME, CURLOPTPASSWORD, or...

CVE-2026-33216

creationtimestamp| type| source ---|---|--- 2026-03-25 19:16:32+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33216 2026-03-25 21:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhvycfbuag2x 2026-03-25 21:26:46+00:00| seen|...

CVE-2026-20004

creationtimestamp| type| source ---|---|--- 2026-03-25 18:51:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhvr2bwtq22m 2026-03-26 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/cisco-ios-xe-multiple-vulnerabilities20260326 2026-03-26 03:00:10+00:00| seen|...

EUVD-2026-15609

Improper Control of Generation of Code 'Code Injection' vulnerability in Saad Iqbal Post Snippets post-snippets allows Remote Code Inclusion.This issue affects Post Snippets: from n/a through = 4.0.12...

EUVD-2026-15557

Missing Authorization vulnerability in bdthemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through = 4.0.21...

CVE-2026-3217

creationtimestamp| type| source ---|---|--- 2026-03-25 18:29:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvpu7ymok2z...

CVE-2026-26233

creationtimestamp| type| source ---|---|--- 2026-03-25 18:22:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvphjwizq22 2026-03-26 03:00:14+00:00| seen| https://nvd.nist.gov/vuln/detail/CVE-2026-27656...

CVE-2026-3213

creationtimestamp| type| source ---|---|--- 2026-03-25 18:04:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvogjrf7e2s...

CVE-2026-20012

creationtimestamp| type| source ---|---|--- 2026-03-25 17:26:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvmd6wen52s 2026-03-26 01:45:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwi6dmbyt2r 2026-03-26 03:00:00+00:00| seen|...

CVE-2026-20086

creationtimestamp| type| source ---|---|--- 2026-03-25 17:16:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvlrc3mng2s 2026-03-26 00:01:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwcfvzt3727 2026-03-26 03:00:00+00:00| seen|...

CVE-2026-25001

Improper Control of Generation of Code 'Code Injection' vulnerability in Saad Iqbal Post Snippets post-snippets allows Remote Code Inclusion.This issue affects Post Snippets: from n/a through = 4.0.12...

CVE-2026-24362

Missing Authorization vulnerability in bdthemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through = 4.0.21...

CVE-2026-32537 WordPress Visual Portfolio, Photo Gallery & Post Grid plugin <= 3.5.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in nK Visual Portfolio, Photo Gallery & Post Grid visual-portfolio allows PHP Local File Inclusion.This issue affects Visual Portfolio, Photo Gallery & Post Grid: from n/a through =...

CVE-2026-25001 WordPress Post Snippets plugin <= 4.0.12 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Saad Iqbal Post Snippets post-snippets allows Remote Code Inclusion.This issue affects Post Snippets: from n/a through = 4.0.12...

CVE-2026-25001

CVE-2026-25001 is a confirmed vulnerability in the WordPress plugin Post Snippets (formerly Post Snippets – Custom WordPress Code Snippets Customizer) affecting versions up to 4.0.12. The Wordfence entry characterizes the issue as a Remote Code Execution vulnerability requiring authenticated acce...

CVE-2026-25001 WordPress Post Snippets plugin <= 4.0.12 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Saad Iqbal Post Snippets post-snippets allows Remote Code Inclusion.This issue affects Post Snippets: from n/a through = 4.0.12...

CVE-2026-24362

CVE-2026-24362 is a concrete, vendor-confirmed vulnerability affecting Ultimate Post Kit Addons for Elementor (bdthemes Ultimate Post Kit)

CVE-2026-24362 WordPress Ultimate Post Kit plugin <= 4.0.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in bdthemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through = 4.0.21...

CVE-2026-24362 WordPress Ultimate Post Kit plugin <= 4.0.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in bdthemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through = 4.0.21...