PT-2026-55500

Name of the Vulnerable Software and Affected Versions JSON API User versions prior to 4.1.1 Description The JSON API User plugin for WordPress contains a Stored Cross-Site Scripting issue. This occurs because the post comment function fails to properly sanitize input, allowing the comment content...

PT-2026-55440

Name of the Vulnerable Software and Affected Versions weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot versions prior to 2.3.1 Description The plugin contains a missing authorization flaw. The do migration function, registered as the wedocs migrate betterdocs to wedocs AJ...

PT-2026-55517

Name of the Vulnerable Software and Affected Versions Zakra versions prior to 4.2.1 Description The Zakra theme for WordPress contains a Stored Cross-Site Scripting issue. This occurs because the theme registers three post meta fields—zakra menu item color, zakra menu item hover color, and zakra...

CVE-2026-58466

creationtimestamp| type| source ---|---|--- 2026-07-02 23:48:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpp7tl2hjp2e 2026-07-03 15:09:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtbvzpoz2d 2026-07-03 21:54:05+00:00| seen|...

CVE-2026-59095

creationtimestamp| type| source ---|---|--- 2026-07-02 23:35:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpp74a3psv23 2026-07-03 15:09:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtc2izjy2c...

CVE-2026-54998

creationtimestamp| type| source ---|---|--- 2026-07-02 23:24:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpp6hj5djk2o 2026-07-03 00:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mppaiuuxbg2b 2026-07-03 05:04:36+00:00| seen|...

CVE-2026-50722

creationtimestamp| type| source ---|---|--- 2026-07-02 23:21:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpp6derudq22 2026-07-03 02:21:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mppifgegwx2x 2026-07-03 06:27:12+00:00| seen|...

CVE-2026-11896

creationtimestamp| type| source ---|---|--- 2026-07-02 22:20:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2vp73e32d...

CVE-2026-12122

creationtimestamp| type| source ---|---|--- 2026-07-02 22:16:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2oz6fe227...

CVE-2026-59099

creationtimestamp| type| source ---|---|--- 2026-07-02 22:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpozsoeoil2t 2026-07-03 00:08:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppaxex7xh24 2026-07-03 15:09:49+00:00| seen|...

CVE-2026-58460

creationtimestamp| type| source ---|---|--- 2026-07-02 22:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpozsah7qp2a 2026-07-03 16:55:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqz753emf2w...

CVE-2026-57679

creationtimestamp| type| source ---|---|--- 2026-07-02 21:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyy457if2r 2026-07-03 00:35:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppchwjyrl2b 2026-07-03 00:36:00+00:00| seen|...

CVE-2026-57621

creationtimestamp| type| source ---|---|--- 2026-07-02 21:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyuisubn2x...

CVE-2026-27436

creationtimestamp| type| source ---|---|--- 2026-07-02 21:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyqwklut2d 2026-07-31 13:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrx3kxv2272u...

CVE-2026-57624

creationtimestamp| type| source ---|---|--- 2026-07-02 21:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyjrzddk2e...

Missing Authorization

Overview 9router is a 9Router CLI - Start and manage 9Router server Affected versions of this package are vulnerable to Missing Authorization via the POST /api/tunnel/tailscale-install route handler, which accepts a JSON body containing a sudoPassword field and pipes it, along with the contents o...

CVE-2026-5348

creationtimestamp| type| source ---|---|--- 2026-07-02 20:07:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoth3xfxh2o...

CVE-2026-59097 Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

CVE-2026-28322

creationtimestamp| type| source ---|---|--- 2026-07-02 19:37:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mporrnzimn22...

CVE-2026-55950

creationtimestamp| type| source ---|---|--- 2026-07-02 19:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mporghjrir27 2026-07-03 09:41:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaxqaleg2u 2026-07-03 10:37:35+00:00| seen|...