EUVD-2026-35996

The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'titletag' Widget Setting in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-11837

creationtimestamp| type| source ---|---|--- 2026-06-10 06:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnvzvhfhhz25 2026-06-10 06:00:51+00:00| seen| https://infosec.exchange/users/offseq/statuses/116724284473192022 2026-06-10 08:41:51+00:00| seen|...

CVE-2026-53673

creationtimestamp| type| source ---|---|--- 2026-06-10 01:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvj4j6dmr2v 2026-06-10 01:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvl5ug2g62m...

CVE-2026-46518

creationtimestamp| type| source ---|---|--- 2026-06-10 01:00:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvj3po4ik2r 2026-06-10 02:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvmi3n2fb2n...

CVE-2026-34183

creationtimestamp| type| source ---|---|--- 2026-06-10 00:01:48+00:00| seen| https://bsky.app/profile/slackers.it/post/3mnvftkqgtb2f 2026-06-10 00:01:53+00:00| seen| https://bsky.app/profile/slackers.it/post/3mnvftlx3qx2t 2026-06-10 20:00:00+00:00| seen|...

CVE-2026-53738: Incorrect Authorization

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdpactionhandling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks...

CVE-2026-8613: Improper Neutralization of Input During Web Page Generation

The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'titletag' Widget Setting in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress plugin Copy & Delete Posts 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-48392

The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title tag' Widget Setting in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress plugin WP Meta Sort Posts cross-site request fraud vulnerability

WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed on a WordPress site. The WP Meta Sort Posts plugin has a cross-site request...

PT-2026-48552

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp action handling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks...

CVE-2026-7473

creationtimestamp| type| source ---|---|--- 2026-06-09 18:00:32+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8b1e6079-9ba4-4edb-bc5e-097b92ce08d1 2026-06-09 18:11:55+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116721479487661795 2026-06-09...

CVE-2026-24181

creationtimestamp| type| source ---|---|--- 2026-06-09 17:16:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnup5oegg42v 2026-06-09 18:16:15+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116721479487661795...

CVE-2026-45657

creationtimestamp| type| source ---|---|--- 2026-06-09 15:44:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181 2026-06-09 16:12:18+00:00| seen| https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review 2026-06-09 18:45:12+00:00| seen|...

CVE-2026-50507

creationtimestamp| type| source ---|---|--- 2026-06-09 15:44:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181 2026-06-09 16:12:18+00:00| seen| https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review 2026-06-09 19:05:50+00:00| seen|...

CVE-2026-42489

creationtimestamp| type| source ---|---|--- 2026-06-09 13:32:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnucoaa2ss26 2026-06-09 13:41:01+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/116720431315436112 2026-06-10 04:24:52+00:00| seen|...

CVE-2017-20251

WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes through the WordPress REST API. Attackers can send POST requests to the wp-json/wp/v2/posts endpoint...

CVE-2026-41031

creationtimestamp| type| source ---|---|--- 2026-06-09 12:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnu5ju3mrd2l 2026-06-09 12:07:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnu5wos3ls2h...

CVE-2026-10523

creationtimestamp| type| source ---|---|--- 2026-06-09 08:30:20+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-567 2026-06-09 17:18:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnupbjfggb2x 2026-06-09 17:28:39+00:00| seen|...

CVE-2026-46748

creationtimestamp| type| source ---|---|--- 2026-06-09 07:30:01+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-22 2026-06-09 11:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnu26u7t3u2y 2026-06-09 12:12:42+00:00| seen|...