CVE-2026-13320

creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u5w5rz72o...

CVE-2026-56289

creationtimestamp| type| source ---|---|--- 2026-07-09 12:15:07+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56288 2026-07-09 12:37:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7nkxwcyq27...

CVE-2026-9235

creationtimestamp| type| source ---|---|--- 2026-07-09 12:12:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7m7bwwnx2i...

CVE-2026-56288

creationtimestamp| type| source ---|---|--- 2026-07-09 12:09:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7m2flgdc2x 2026-07-09 12:15:05+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56288...

CVE-2026-9027

creationtimestamp| type| source ---|---|--- 2026-07-09 12:07:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7lvw6qiq25...

CVE-2026-13199

creationtimestamp| type| source ---|---|--- 2026-07-09 12:03:21+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mq7lok4sur2w...

CVE-2026-9237

creationtimestamp| type| source ---|---|--- 2026-07-09 12:01:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7lkdz3y62k...

CVE-2026-58307

creationtimestamp| type| source ---|---|--- 2026-07-09 11:57:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7ldswbma2e...

CVE-2026-58306

creationtimestamp| type| source ---|---|--- 2026-07-09 11:55:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7lat5vwc2l...

CVE-2026-7829

creationtimestamp| type| source ---|---|--- 2026-07-09 11:37:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq7ka42nk62a...

CVE-2026-12418

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.7 via the 'wpuffilesdata' parameter due to missing validation on a user controll...

CVE-2026-12517

creationtimestamp| type| source ---|---|--- 2026-07-09 08:13:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq76tg4nxx2g 2026-07-09 17:49:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6yw2ove2c...

CVE-2026-12418 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Modification via 'wpuf_files_data' Parameter

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.7 via the 'wpuffilesdata' parameter due to missing validation on a user controll...

CVE-2026-12418

CVE-2026-12418 describes a vulnerability in the WordPress plugin “User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration” (versions up to 4.3.7). An insecure direct object reference exists via the wpuf_files_data parameter due to missing validation on ...

EUVD-2026-42542

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.7 via the 'wpuffilesdata' parameter due to missing validation on a user controll...

CVE-2026-12418

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.7 via the 'wpuffilesdata' parameter due to missing validation on a user controll...

CVE-2026-13253

Affected software. Ultimate Post plugin for WordPress (up to version 5.0.31). Vulnerability. Stored Cross-Site Scripting via the 'moreResultsText' attribute of the ultimate-post/advanced-search block. Root cause. Advanced_Search::content() concatenates the attribute value into an HTML attribute a...

EUVD-2026-42520

The Ultimate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moreResultsText' block attribute of the ultimate-post/advanced-search block in versions up to and including 5.0.31. This is due to insufficient input sanitization and output escaping in the...

CVE-2026-13253

The Ultimate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moreResultsText' block attribute of the ultimate-post/advanced-search block in versions up to and including 5.0.31. This is due to insufficient input sanitization and output escaping in the...

CVE-2026-13253 Post Grid Gutenberg Blocks for News, Magazines, Blog Websites <= 5.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'moreResultsText' Block Attribute

The Ultimate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moreResultsText' block attribute of the ultimate-post/advanced-search block in versions up to and including 5.0.31. This is due to insufficient input sanitization and output escaping in the...