WordPress Themify Portfolio Post plugin <= 1.2.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Themify Portfolio Post versions = 1.2.9...

CVE-2026-8172

creationtimestamp| type| source ---|---|--- 2026-06-23 08:26:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowy4lqfd72a...

CVE-2026-7687

creationtimestamp| type| source ---|---|--- 2026-06-23 08:20:43+00:00| seen| https://bsky.app/profile/yogsotho.bsky.social/post/3mowxrnuw722s...

CVE-2026-55655

creationtimestamp| type| source ---|---|--- 2026-06-23 08:01:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowwprsilu2l 2026-06-28 18:41:10+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpemrrslna2p 2026-06-28 18:41:12+00:00| seen|...

CVE-2026-12866

creationtimestamp| type| source ---|---|--- 2026-06-23 06:00:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116797893970275740 2026-06-23 06:00:56+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mowpwxfz6z2b 2026-06-23 07:57:27+00:00| seen|...

CVE-2026-11772

creationtimestamp| type| source ---|---|--- 2026-06-23 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-11772 2026-06-23 16:06:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxrs3s44b2q...

CVE-2026-54232

creationtimestamp| type| source ---|---|--- 2026-06-23 01:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow7gveg3u2j 2026-07-01 11:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mplgiawmxa2x...

CVE-2026-48502

creationtimestamp| type| source ---|---|--- 2026-06-23 00:45:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow6ee6ob22q 2026-07-20 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2mvnvtah26...

CVE-2026-48166

creationtimestamp| type| source ---|---|--- 2026-06-23 00:28:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow5eqds6w2q 2026-06-24 07:42:24+00:00| seen| https://gist.github.com/alon710/0cc6180222e375f03b77f1081a3811f5...

CVE-2026-54233

creationtimestamp| type| source ---|---|--- 2026-06-23 00:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow4qv4vqu2m...

CVE-2026-48967

creationtimestamp| type| source ---|---|--- 2026-06-23 00:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mow4p6hyif2v...

CVE-2026-53923

creationtimestamp| type| source ---|---|--- 2026-06-23 00:15:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow4o6qwhh26...

CVE-2026-44727

creationtimestamp| type| source ---|---|--- 2026-06-23 00:00:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mow3tlg6pj2y 2026-06-23 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116796479180840470 2026-06-27 19:37:06+00:00| seen|...

PT-2026-51587

Name of the Vulnerable Software and Affected Versions Ansible affected versions not specified Description In the plugins/modules/nexmo.py module, the api key and api secret variables are marked as no log=True to prevent them from being logged. However, these credentials are URL-encoded and includ...

CVE-2026-54271

creationtimestamp| type| source ---|---|--- 2026-06-22 23:45:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow2xvn5ft2q 2026-07-20 07:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2qawu73k26...

CVE-2026-44271

creationtimestamp| type| source ---|---|--- 2026-06-22 23:19:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movzkayykd2f 2026-06-23 14:04:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moxkylwnok27 2026-07-23 01:07:06+00:00| seen|...

CVE-2026-56323

creationtimestamp| type| source ---|---|--- 2026-06-22 23:18:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movzhb7brx2c...

CVE-2026-56397

creationtimestamp| type| source ---|---|--- 2026-06-22 23:02:05+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3movykqubwq23...

CVE-2026-56357 n8n - Webhook Forgery via Missing HMAC-SHA256 Signature Verification in GitHub Webhook Trigger

n8n before 1.123.15 and 2.5.0 contains a webhook forgery vulnerability in the GitHub Webhook Trigger node that fails to implement HMAC-SHA256 signature verification. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary data, spoofing GitHub webhoo...

CVE-2026-56255

Capgo before 12.128.2 contains a denial-of-service vulnerability in POST /app/demo that lets authenticated users with org write permissions create unlimited demo apps without rate limiting or quotas. Each request can trigger around 138 database write operations, leading to degraded performance, h...