CVE-2026-40828

creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:19+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:12:09+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645529147227087...

CVE-2026-40843

creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:17+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:12:07+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645529147227087...

CVE-2026-40816

creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:14+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:11:20+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2nw2pp232 2026-05-27 08:12:05+00:00| seen|...

CVE-2026-7614

The Old Posts Highlighter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the OPHoptions function. This makes it possible for unauthenticated attackers to update the plugin's...

CVE-2026-7614

CVE-2026-7614 affects the WordPress plugin Old Posts Highlighter up to version 1.0.3. The root cause is missing or incorrect nonce validation on the OPH_options function, enabling Cross-Site Request Forgery. This allows unauthenticated attackers to update the plugin’s configuration by deceiving a...

CVE-2026-7614

The Old Posts Highlighter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the OPHoptions function. This makes it possible for unauthenticated attackers to update the plugin's...

CVE-2026-7614 Old Posts Highlighter <= 1.0.3 - Cross-Site Request Forgery to Settings Update

The Old Posts Highlighter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the OPHoptions function. This makes it possible for unauthenticated attackers to update the plugin's...

CVE-2026-8450

creationtimestamp| type| source ---|---|--- 2026-05-27 05:17:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsqxmuwt222 2026-05-27 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116645011565190190 2026-05-27 06:00:29+00:00| seen|...

CVE-2025-15649

creationtimestamp| type| source ---|---|--- 2026-05-27 05:11:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsqmc7vbf2t 2026-05-27 05:12:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsqoqx2dh2m...

CVE-2026-2253

creationtimestamp| type| source ---|---|--- 2026-05-27 05:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmspyb5e7w2e 2026-05-27 05:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsqr6mndi2i 2026-05-27 07:01:06+00:00| seen|...

CVE-2025-43306

creationtimestamp| type| source ---|---|--- 2026-05-27 02:45:37+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmsihnwhmn2v 2026-05-27 04:01:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsmpfgm3q2s...

CVE-2026-8647

creationtimestamp| type| source ---|---|--- 2026-05-27 00:32:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsazkwpzd2s 2026-05-27 01:03:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmscr5cl2r2v...

CVE-2026-7614: Cross-Site Request Forgery (CSRF)

The Old Posts Highlighter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the OPHoptions function. This makes it possible for unauthenticated attackers to update the plugin's...

CVE-2026-42755: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

PT-2026-43663

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

CVE-2026-9170

creationtimestamp| type| source ---|---|--- 2026-05-26 19:03:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmromuyjiz2i 2026-05-26 19:03:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmromx6rrh2n...

WordPress Old Posts Highlighter plugin <= 1.0.3 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by afnaan - SMKN 1 Bantul in WordPress Plugin Old Posts Highlighter versions = 1.0.3...

CERTFR-2026-ACT-023

creationtimestamp| type| source ---|---|--- 2026-05-26 13:19:22+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mmr3fxtj3v2b 2026-05-26 13:19:41+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116641075124338987...

CVE-2026-39831

creationtimestamp| type| source ---|---|--- 2026-05-25 18:09:02+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmp34s6rls2e 2026-05-25 18:09:03+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmp34ybi2s2e 2026-05-25 18:09:03+00:00| seen|...

CVE-2018-25363

Twitter-Clone 1 contains a cross-site request forgery vulnerability that allows remote attackers to force victims to delete posts by crafting malicious HTML forms. Attackers can create hidden forms targeting tweetdel.php with tweet IDs and automatically submit them to delete arbitrary posts from...