GHSA-9JPJ-G8VV-J5MF

creationtimestamp| type| source ---|---|--- 2026-04-04 09:17:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3minvmt3eck62...

CVE-2026-2600

creationtimestamp| type| source ---|---|--- 2026-04-04 08:24:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minsou44wm2i 2026-04-10 18:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj5xdbusez2m 2026-04-20 19:00:15+00:00| published-proof-of-concept|...

CVE-2026-4896 WCFM - WooCommerce Frontend Manager <= 6.7.25 - Insecure Direct Object References to Autenticated (Vendor+) Arbitrary Post/Product Manipulation

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.25 via multiple AJAX actions including wcfmmodifyorderstatus, deletewcfmarticle,...

CVE-2026-4896 WCFM - WooCommerce Frontend Manager <= 6.7.25 - Insecure Direct Object References to Autenticated (Vendor+) Arbitrary Post/Product Manipulation

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.25 via multiple AJAX actions including wcfmmodifyorderstatus, deletewcfmarticle,...

CVE-2026-4896

The CVE-2026-4896 entry concerns the WCFM – Frontend Manager for WooCommerce plugin with the Bookings Subscription Listings Compatible extension for WordPress, affected up to version 6.7.25. The vulnerability is an Insecure Direct Object Reference (IDOR) affecting authenticated users with Vendor-...

CVE-2026-34778

creationtimestamp| type| source ---|---|--- 2026-04-04 05:45:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minjtetwo72o...

CVE-2026-34776

creationtimestamp| type| source ---|---|--- 2026-04-04 05:24:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minin3cmxs2i...

CVE-2026-34775

creationtimestamp| type| source ---|---|--- 2026-04-04 05:21:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minihpc62725...

CVE-2026-2924

creationtimestamp| type| source ---|---|--- 2026-04-04 04:16:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minesxcsib2i 2026-04-10 12:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj5d7km35x2y...

CVE-2026-34770

creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:49+00:00| seen| Telegram/Wq2MikHHjaMT3QcZYic1EqOjYlzbZBeR3fuLUZ6lQSb49CA 2026-04-04 05:35:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minjbhz2rp2o...

CVE-2026-34771

creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:49+00:00| seen| Telegram/Wq2MikHHjaMT3QcZYic1EqOjYlzbZBeR3fuLUZ6lQSb49CA 2026-04-04 02:23:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3min6irxxor2r 2026-04-04 05:16:19+00:00| seen|...

CVE-2026-33184

creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc 2026-04-04 03:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3minano6eba2s 2026-04-14 02:07:07+00:00| seen|...

CVE-2026-34061

creationtimestamp| type| source ---|---|--- 2026-04-04 00:15:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimxfbyfnk2o...

CVE-2026-34229

creationtimestamp| type| source ---|---|--- 2026-04-04 00:09:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimwzpv5eq2i...

CVE-2026-34788

creationtimestamp| type| source ---|---|--- 2026-04-04 00:02:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimwnemipo2j...

PT-2026-30367

MyBB Like Plugin 3.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating posts or threads with unvalidated subject content. Attackers can craft post subjects containing script tags that execute when other users view the attacker's profile,...

MyBB Like Plugin 跨站脚本漏洞

MyBB Like Plugin is an extension for forums developed by MyBB Corporation. Version 3.0.0 of MyBB Like Plugin contains a cross-site scripting vulnerability. This vulnerability arises from the lack of validation of topic content when posts or topics are created, which may allow attackers to inject...

CVE-2016-15058

creationtimestamp| type| source ---|---|--- 2026-04-03 23:25:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimulfblib2t 2026-04-04 01:30:17+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3min3k5xk2c2q...

CVE-2026-27834

creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:15+00:00| published-proof-of-concept| Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw 2026-04-10 10:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj537tvftz2w...

CVE-2026-5485

creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:08+00:00| seen| Telegram/C4IqkAaofmVuG0ts1zoVr23H-sEIs7UsuvOGOq7uR7BrNw 2026-04-04 04:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mindxbbi2t27 2026-06-14 16:07:09+00:00| seen|...