CVE-2026-67354

creationtimestamp| type| source ---|---|--- 2026-08-01 14:07:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/imvkpkdsiyvnu 2026-08-01 22:25:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2j6cxcjo2l 2026-08-01 22:25:42+00:00| seen|...

CVE-2025-71403

creationtimestamp| type| source ---|---|--- 2026-08-01 13:47:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrzm7fofvq22...

CVE-2026-67340

creationtimestamp| type| source ---|---|--- 2026-08-01 13:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrzlbintyl2c 2026-08-01 13:55:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2xavbtzc3oidi 2026-08-01 15:00:33+00:00| seen|...

CVE-2026-16144

creationtimestamp| type| source ---|---|--- 2026-08-01 11:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzcwkxawn2n 2026-08-01 18:01:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22fgopyh2v 2026-08-01 23:03:24+00:00| seen|...

CVE-2026-6453

creationtimestamp| type| source ---|---|--- 2026-08-01 10:22:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jaeeialp5gym4 2026-08-01 17:33:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzyur7if52x 2026-08-01 17:34:09+00:00| seen|...

CVE-2026-13157

creationtimestamp| type| source ---|---|--- 2026-08-01 10:20:08+00:00| seen| https://bsky.app/profile/smartdeals.bsky.social/post/3mrzan5fore2x 2026-08-01 13:00:04+00:00| seen| Telegram/zkpMdkb1nwTnC0N6uNzVvNYCe5r6OIkmQsBbvblzOMqyUQE 2026-08-01 14:55:17+00:00| seen|...

CVE-2026-18062

creationtimestamp| type| source ---|---|--- 2026-08-01 10:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ibokoolakvlm2 2026-08-01 17:44:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzihv5tx2d 2026-08-01 17:45:13+00:00| seen|...

CVE-2026-17580

The Advanced Views – Display Custom Fields ACF, Pods, MetaBox, Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the registerrestroutes. This makes it...

CVE-2026-2916

The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the enqueuescripts method in class/dashboard/class-dashboard.php. The plugin injects a JkitDashboardOption JavaScript object containing full plugin...

EUVD-2026-51742

The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to second-order SQL Injection via 'messagesid' Parameter in all versions up to, and including, 3.1.42 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

CVE-2026-13458 GenerateBlocks <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes

The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-14839

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-2916

The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the enqueuescripts method in class/dashboard/class-dashboard.php. The plugin injects a JkitDashboardOption JavaScript object containing full plugin...

CVE-2026-2916 Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script

The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the enqueuescripts method in class/dashboard/class-dashboard.php. The plugin injects a JkitDashboardOption JavaScript object containing full plugin...

CVE-2026-58178

creationtimestamp| type| source ---|---|--- 2026-08-01 06:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mryu6dkplb2v...

CVE-2026-14839 Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14839

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14839

CVE-2026-14839 affects Mapster WP Maps WordPress plugin (

CVE-2026-14839 Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

EUVD-2026-51711

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...