CVE-2026-8940 WP Meta Sort Posts <= 0.9 - Cross-Site Request Forgery to Plugin Settings Update

The WP Meta Sort Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9. This is due to missing or incorrect nonce validation on the top-level included script in msp-options.php. This makes it possible for unauthenticated attackers to chan...

CVE-2026-8940

The CVE-2026-8940 entry concerns WordPress plugin WP Meta Sort Posts (versions

CVE-2026-27671

creationtimestamp| type| source ---|---|--- 2026-06-09 01:20:31+00:00| seen| https://www.acn.gov.it/portale/w/sap-security-patch-day-17 2026-06-09 03:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntb2d6qye2p 2026-06-09 04:30:27+00:00| seen|...

CVE-2026-8940: Cross-Site Request Forgery (CSRF)

The WP Meta Sort Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9. This is due to missing or incorrect nonce validation on the top-level included script in msp-options.php. This makes it possible for unauthenticated attackers to chan...

SolarWinds Serv-U 15.5.0 < 15.5.5

The version of SolarWinds Serv-U installed on the remote host is prior to 15.5.4 HF1. It is, therefore, affected by a vulnerability as referenced in the solarwindsserv-u1554hf1 advisory. - SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without...

CVE-2017-20251: Improper Control of Generation of Code

WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes through the WordPress REST API. Attackers can send POST requests to the wp-json/wp/v2/posts endpoint...

CVE-2026-46484

creationtimestamp| type| source ---|---|--- 2026-06-08 21:24:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnsmi5uyf52i 2026-06-08 22:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnsoloid3q27...

CVE-2026-46656

creationtimestamp| type| source ---|---|--- 2026-06-08 17:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mns5t6aszh2s 2026-06-08 17:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns5w7ytr72f...

WordPress WP Meta Sort Posts plugin <= 0.9 - Cross-Site Request Forgery to Plugin Settings Update vulnerability

Cross-Site Request Forgery to Plugin Settings Update vulnerability discovered by afnaan - SMKN 1 Bantul in WordPress Plugin WP Meta Sort Posts versions = 0.9...

CVE-2026-11503

creationtimestamp| type| source ---|---|--- 2026-06-08 10:30:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnri2bwqn322 2026-06-08 10:30:51+00:00| seen| https://infosec.exchange/users/offseq/statuses/116714021744747488 2026-06-08 11:25:46+00:00| seen|...

CVE-2023-54350

creationtimestamp| type| source ---|---|--- 2026-06-08 04:43:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqunkjorx24 2026-06-08 05:06:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqvxf4enc2d 2026-06-15 07:07:22+00:00| seen|...

CVE-2023-54352

creationtimestamp| type| source ---|---|--- 2026-06-08 04:40:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnquhzn7fz2y 2026-06-08 05:19:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqwopxp2k2v 2026-06-13 13:07:22+00:00| seen|...

CVE-2026-6420

creationtimestamp| type| source ---|---|--- 2026-06-07 16:49:08+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnpmpzrvus2z 2026-06-07 16:49:09+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnpmq3br4s2z...

CVE-2026-7665

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajaxloadmore function due to insufficient restrictions on which posts can be included. This makes it possible f...

CVE-2026-11451

creationtimestamp| type| source ---|---|--- 2026-06-07 04:49:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnoejbd7pt22 2026-06-07 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116707650683946203 2026-06-07 07:30:26+00:00| seen|...

CVE-2026-49494

creationtimestamp| type| source ---|---|--- 2026-06-07 04:16:20+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-49494 2026-06-07 12:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnp6tprsqw25 2026-06-07 13:24:19+00:00| seen|...

CVE-2026-8976

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action...

CVE-2026-7665

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajaxloadmore function due to insufficient restrictions on which posts can be included. This makes it possible f...

CVE-2026-7665 Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajaxloadmore function due to insufficient restrictions on which posts can be included. This makes it possible f...

CVE-2026-7665

CVE-2026-7665 affects the WordPress plugin Essential Addons for Elementor (up to version 6.6.4). The issue arises in the ajax_load_more handler, with insufficient restrictions on which posts can be returned, enabling unauthenticated attackers to extract data from password-protected, private, or d...