CVE-2026-6226

creationtimestamp| type| source ---|---|--- 2026-05-28 11:20:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvvpnioo32h 2026-05-28 15:01:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwc2spmm72r...

CVE-2024-47096

creationtimestamp| type| source ---|---|--- 2026-05-28 11:06:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvuw2xunp2i...

CVE-2026-8689

creationtimestamp| type| source ---|---|--- 2026-05-28 11:02:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvupdryo32e...

CVE-2026-9807

creationtimestamp| type| source ---|---|--- 2026-05-28 10:59:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvujepc6v2p...

CVE-2026-9806

creationtimestamp| type| source ---|---|--- 2026-05-28 10:56:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvudynin22p 2026-08-02 21:14:35+00:00| seen| https://t.me/GithubRedTeam/96334 2026-08-03 01:01:23+00:00| seen| https://t.me/GithubRedTeam/96334 2026-08-03 05:00:03+00:00|...

CVE-2026-7862

creationtimestamp| type| source ---|---|--- 2026-05-28 10:53:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvu746vgy2e 2026-05-28 16:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwffqixuf2e...

WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by mcdruid in WordPress Plugin Post SMTP versions = 3.6.2...

CVE-2026-9644

creationtimestamp| type| source ---|---|--- 2026-05-28 07:11:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhsficy22n 2026-05-29 01:24:13+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmxetw7lxy2i...

CVE-2026-9801

creationtimestamp| type| source ---|---|--- 2026-05-28 07:06:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhjrk23y2v...

CVE-2026-9793

creationtimestamp| type| source ---|---|--- 2026-05-28 06:57:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvgysdyzn2n...

CVE-2026-2374

creationtimestamp| type| source ---|---|--- 2026-05-28 06:48:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmvgi2bzcs2k...

CVE-2026-7770

creationtimestamp| type| source ---|---|--- 2026-05-28 06:47:37+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3mmvghcls5a2r 2026-06-01 19:32:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnat3gsyqf27 2026-06-01 21:00:36+00:00| seen|...

GHSA-CPF7-J4CF-VQX4 Keycloak has an Out-of-bounds Read

A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with a malformed 'Authorization: Bearer' header to any client registration endpoint. This can lead to an...

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF due to not requiring POST requests for an HTTP endpoint. This vulnerability allows attackers to resume failed Multijob builds. Remediation Upgrade org.jenkins-ci.plugins:jenkins-multijob-plugin to version...

CVE-2026-9009 Crawlomatic Multipage Scraper Post Generator <= 2.7.2 - Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode Attribute

The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.7.2 via the filtercontent function. This is due to passing the attacker-supplied 'callbackraw' shortcode attribute directly into calluserfunc with n...

CVE-2026-3173 Meta Field Block <= 1.5.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary User Meta Exposure

The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1. This is due to the plugin allowing users to specify arbitrary object IDs and object types via block attributes without validating whether the authenticated user...

CVE-2026-3173 Meta Field Block <= 1.5.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary User Meta Exposure

The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1. This is due to the plugin allowing users to specify arbitrary object IDs and object types via block attributes without validating whether the authenticated user...

EUVD-2026-32722

The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1. This is due to the plugin allowing users to specify arbitrary object IDs and object types via block attributes without validating whether the authenticated user...

CVE-2026-3173

The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 1.5.1. Authenticated attackers with Contributor-level access or higher can read arbitrary user meta, post meta, and term meta from any object, potentially exposing PII (...

CVE-2026-9039

creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-08 2026-05-28 22:08:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwzw4g35425 2026-07-24 14:24:47+00:00| seen|...