CVE-2026-32564 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32564 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-80586

creationtimestamp| type| source ---|---|--- 2026-08-27 08:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2hq2qwvc25 2026-08-27 16:23:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-80561

creationtimestamp| type| source ---|---|--- 2026-08-27 08:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2h65amoc24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-19401

creationtimestamp| type| source ---|---|--- 2026-08-27 08:23:07+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mu2g7t33ysfm...

CVE-2026-80551

creationtimestamp| type| source ---|---|--- 2026-08-27 08:20:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2g2etdac25 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-74752

creationtimestamp| type| source ---|---|--- 2026-08-27 08:00:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2ewomzgq24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-74746

creationtimestamp| type| source ---|---|--- 2026-08-27 07:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2eesm3jj2e 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774 2026-10-01 18:00:00+00:00| seen|...

WordPress Slim SEO plugin < 4.9.11 - Contributor+ Arbitrary Post Meta Disclosure vulnerability

Contributor+ Arbitrary Post Meta Disclosure vulnerability discovered by Shivamani Vastrala in WordPress Plugin Slim SEO versions 4.9.11...

CVE-2026-74737

creationtimestamp| type| source ---|---|--- 2026-08-27 07:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2dsuodje24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-15990

creationtimestamp| type| source ---|---|--- 2026-08-27 04:02:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzxmxp2jw2o...

CVE-2026-80212

creationtimestamp| type| source ---|---|--- 2026-08-27 02:29:30+00:00| seen| https://bsky.app/profile/hsbt.org/post/3mtzshizd5k2u 2026-08-30 12:00:54+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mucdrzvkb22r 2026-10-24 20:57:06+00:00| seen|...

CVE-2026-76784

creationtimestamp| type| source ---|---|--- 2026-08-27 02:15:28+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtzrohda632e 2026-08-27 16:21:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mu3axdwp7c2e...

SUSE CVE-2026-68525

Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from...

CVE-2026-30073

An issue in the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2026-32566: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-37064

User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the application users via sending a specially crafted POST request to the affected endpoint with a chosen 'username' parameter to test if the user exists...

CVE-2026-32564: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-37073: Improper Access Control

Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emails from the configured SMPT server on the application via making a POST request to the endpoint with needed parameters and header...

CVE-2026-37071: Improper Privilege Management

Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission to take over the super administrator account via a specially crafted POST request to the affected endpoint renaming th...