CVE-2026-3017 Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts <= 3.0.12 - Authenticated (Administrator+) PHP Object Injection

The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.12 via deserialization of untrusted input in the importshortcodes function. This makes it possible for authenticate...

CVE-2026-3017

The CVE-2026-3017 entry concerns the WordPress plugin Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts, affected up to version 3.0.12. The vulnerability is a PHP Object Injection via deserialization of untrusted input in the import_shortcodes() function. With Administr...

CVE-2026-3017 Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts <= 3.0.12 - Authenticated (Administrator+) PHP Object Injection

The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.12 via deserialization of untrusted input in the importshortcodes function. This makes it possible for authenticate...

CVE-2026-39420

creationtimestamp| type| source ---|---|--- 2026-04-14 04:59:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjglvcscru2m...

CVE-2026-34984

creationtimestamp| type| source ---|---|--- 2026-04-14 04:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgldfq6c62g 2026-04-14 05:17:21+00:00| seen| Telegram/VN5qpdZvC1XQa0kocwrxs34zDP5KgO9HhvqtOghSHVfgqA...

CVE-2026-39422

creationtimestamp| type| source ---|---|--- 2026-04-14 04:39:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgkripynq2m...

CVE-2026-39426

creationtimestamp| type| source ---|---|--- 2026-04-14 04:19:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgjoddwhn2x...

CVE-2026-34264

creationtimestamp| type| source ---|---|--- 2026-04-14 04:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgj47w3yn2w...

CVE-2026-34261

creationtimestamp| type| source ---|---|--- 2026-04-14 04:07:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgiza3qs22o...

WordPress Smart Post Show - Post Grid, Post Carousel & Slider, and List Category Posts plugin <= 3.0.12 - Authenticated (Administrator+) PHP Object Injection vulnerability

WordPress Smart Post Show - Post Grid, Post Carousel & Slider, and List Category Posts plugin = 3.0.12 - Authenticated Administrator+ PHP Object Injection vulnerability discovered by Vilaysone CHANTHAVONG 0xJ0cKkY - Cyberus Technologies in WordPress Plugin Post Grid, Post Carousel, & List Categor...

CVE-2026-31908

creationtimestamp| type| source ---|---|--- 2026-04-14 03:10:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjgfsy5dui2c 2026-04-14 11:38:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhc6k3jmx2o 2026-04-16 15:19:33+00:00| seen|...

CVE-2026-33892

creationtimestamp| type| source ---|---|--- 2026-04-14 03:04:52+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-20 2026-04-14 11:17:13+00:00| seen| Telegram/6WVrU8qOMDkeYG6tSwEbGZwrXZCEgsbamlgvZFkOKVwvEhQ 2026-04-14 12:07:41+00:00| seen|...

CVE-2023-44373

creationtimestamp| type| source ---|---|--- 2026-04-14 03:04:52+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-20 2026-04-14 13:10:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhd6zgtz2a 2026-04-21 10:00:00+00:00| seen|...

CVE-2026-4365

creationtimestamp| type| source ---|---|--- 2026-04-14 03:02:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjgfdxhg352f 2026-04-14 03:16:35+00:00| published-proof-of-concept| Telegram/v04jgzFsdRRg0faEVT7MCYFvzaiVamBu-2mRXh2qzS6BJs 2026-04-14 04:22:14+00:00| seen|...

CVE-2026-40246

creationtimestamp| type| source ---|---|--- 2026-04-14 02:11:37+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-g9cw-qwhf-24jp 2026-04-16 23:18:23+00:00| published-proof-of-concept| Telegram/x6U1CUbtpfWdw00zGhzow4OOkK7AiEHUVbiM6o3SMYH6zs0 2026-04-16...

CVE-2026-40247

creationtimestamp| type| source ---|---|--- 2026-04-14 02:11:30+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-x5r2-r74c-3w28 2026-04-16 23:18:29+00:00| published-proof-of-concept| Telegram/uUtOgPMgnfpzQaGdgE5uvRP8Wc5QVkmzi4lAg5HL6Ws0-I 2026-04-17...

CVE-2026-6220

creationtimestamp| type| source ---|---|--- 2026-04-14 01:42:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgauzyo6p2t...

CVE-2026-6203

creationtimestamp| type| source ---|---|--- 2026-04-14 01:37:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgam3hz7s2o 2026-04-14 06:22:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-6203.yaml 2026-04-15...

CVE-2026-39956

creationtimestamp| type| source ---|---|--- 2026-04-14 01:32:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgad4wdo72g...

CVE-2026-22565

creationtimestamp| type| source ---|---|--- 2026-04-14 01:28:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjga3ex3we2m 2026-04-14 23:21:40+00:00| published-proof-of-concept| Telegram/vFalP9cCg-kFoPrSdHM4ZH4qnLHRdngXJCuq8FbW2RkF4k...