41290 matches found
CVE-2026-9008
creationtimestamp| type| source ---|---|--- 2026-06-06 05:01:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnluq5vayr2d 2026-06-12 06:16:27+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo33pff4bj2r...
CVE-2026-7795
creationtimestamp| type| source ---|---|--- 2026-06-06 04:58:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnluk6lqeo2l 2026-06-12 07:17:23+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo372m5iob2z...
CVE-2026-7796
creationtimestamp| type| source ---|---|--- 2026-06-06 04:47:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnltxah2uj2n 2026-06-12 13:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo3t5sjpha2w...
CVE-2026-7537
creationtimestamp| type| source ---|---|--- 2026-06-06 04:45:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlttfftwg2y 2026-06-06 06:24:08+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnlzdma4422f 2026-06-07 00:01:35+00:00| seen|...
CVE-2026-8978
creationtimestamp| type| source ---|---|--- 2026-06-06 04:41:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnltmgw6kt23 2026-06-12 09:16:32+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo3frfejkb22...
CVE-2026-2500
The Quick Playground plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.4. This is due to the qckplydata function passing the user-supplied filename POST parameter directly to filegetcontents without any validation, sanitization, or path restriction. Th...
CVE-2026-7665
CVE-2026-7665 affects the WordPress plugin Essential Addons for Elementor (up to version 6.6.4). The issue arises in the ajax_load_more handler, with insufficient restrictions on which posts can be returned, enabling unauthenticated attackers to extract data from password-protected, private, or d...
CVE-2026-9008
The Page-list plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.2. This is due to the pagelistunqprfxextshortcode function the pagelistext / pagelistext shortcode accepting attacker-controlled poststatus, posttype, and showmetakey attributes and...
CVE-2026-50234
creationtimestamp| type| source ---|---|--- 2026-06-06 02:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlkm5gd2r2q...
CVE-2026-6240
creationtimestamp| type| source ---|---|--- 2026-06-06 01:03:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlhgwbmmg2d...
EUVD-2026-34932
The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action...
EUVD-2026-34922
The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and including 7.0.18. This is due to the use of unserialize without an allowedclasses restriction in the IdsToCollection::getidsfromstring function, which processes...
CVE-2026-45291
creationtimestamp| type| source ---|---|--- 2026-06-06 00:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnldwlm7i22k...
PT-2026-47124
Name of the Vulnerable Software and Affected Versions Page-list plugin for WordPress versions prior to 6.3 Description Missing authorization occurs in the pagelist unqprfx ext shortcode function, specifically within the 'pagelist ext' and 'pagelistext' shortcodes. The function accepts...
WordPress plugin RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
WordPress plugin Klamra Paycal for Aspaclaria 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...
CVE-2026-7654 Admin Columns <= 7.0.18 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution via Custom Field Meta Value
The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and including 7.0.18. This is due to the use of unserialize without an allowedclasses restriction in the IdsToCollection::getidsfromstring function, which processes...
CVE-2026-7654 Admin Columns <= 7.0.18 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution via Custom Field Meta Value
The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and including 7.0.18. This is due to the use of unserialize without an allowedclasses restriction in the IdsToCollection::getidsfromstring function, which processes...
CVE-2026-7654
The Admin Columns plugin for WordPress (up to version 7.0.18) is vulnerable to PHP Object Injection that leads to Remote Code Execution. Root cause: unserialize() used without an allowed_classes restriction in IdsToCollection::get_ids_from_string(), processing attacker-controlled post meta values...