WordPress plugin Twitter posts to Blog 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Version...

CVE-2026-1786: Missing Authorization

The Twitter posts to Blog plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'dgtwoptions' function in all versions up to, and including, 1.11.25. This makes it possible for unauthenticated attackers to update plugin settings including...

CVE-2025-52436

creationtimestamp| type| source ---|---|--- 2026-02-10 16:18:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejegruwr32v 2026-02-10 16:18:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejehxrag32g 2026-02-11 13:55:10+00:00| seen|...

CVE-2026-1603

creationtimestamp| type| source ---|---|--- 2026-02-10 16:17:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejegksy3522 2026-02-10 16:18:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejehqfp3l2h 2026-02-11 04:00:00+00:00| seen|...

CVE-2025-6967

creationtimestamp| type| source ---|---|--- 2026-02-10 14:18:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mej5qq7ylq22 2026-02-10 14:18:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mej5qzmxgb2o 2026-02-10 14:18:56+00:00| seen|...

CVE-2026-23717

creationtimestamp| type| source ---|---|--- 2026-02-10 11:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meisqqcfja2r 2026-02-10 11:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meisrmrzns22 2026-02-10 11:06:43+00:00| seen|...

CVE-2025-15310

creationtimestamp| type| source ---|---|--- 2026-02-10 00:19:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehou653bx2v 2026-02-10 00:19:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehouhenqv2r...

CVE-2026-25808

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization. This vulnerability is...

UBUNTU-CVE-2026-25892

Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where adminer.org sends signed version info via JavaScript postMessage, which the browser then POSTs to ?script=version. This endpoint lacks origin validation and accepts POST data from a...

CVE-2026-25808 Hollo DMs get leaked and can be seen on Webfinger Browser

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization. This vulnerability is...

CVE-2026-25808

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization. This vulnerability is...

CVE-2026-25808

Hollo (federated single-user microblogging) is affected by a vulnerability in the ActivityPub outbox that exposed DMs and followers-only posts prior to version 0.6.20 and 0.7.2. The issue is resolved in those versions (0.6.20 and 0.7.2). The CVSS is provided (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; ...

CVE-2026-25808 Hollo DMs get leaked and can be seen on Webfinger Browser

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization. This vulnerability is...

CVE-2026-25808 Hollo DMs get leaked and can be seen on Webfinger Browser

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization. This vulnerability is...

CVE-2026-1486

creationtimestamp| type| source ---|---|--- 2026-02-09 20:24:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehbpr3lqv23 2026-02-09 20:24:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehbqyfm4i2v 2026-02-10 20:10:05+00:00| seen|...

CVE-2026-25231

creationtimestamp| type| source ---|---|--- 2026-02-09 20:23:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehbpjrsr323 2026-02-09 20:24:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehbqrdra722...

CVE-2025-6830

creationtimestamp| type| source ---|---|--- 2026-02-09 13:02:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3megj25bk7r23 2026-02-09 13:02:29+00:00| seen| https://bsky.app/profile/potato.software/post/3megj25yvs42l...

User Submitted Posts <= 20251121 - Unauthenticated Open Redirect

The User Submitted Posts plugin for WordPress is vulnerable to Open Redirect in all versions up to and including 20251121. This is due to insufficient validation on the redirect-override POST parameter. Unauthenticated attackers can redirect users to potentially malicious sites by tricking them...

CVE-2026-2210

creationtimestamp| type| source ---|---|--- 2026-02-09 03:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mefhfzjie32a 2026-02-09 03:00:47+00:00| seen| https://infosec.exchange/users/offseq/statuses/116038437255859099...

PT-2026-7177

Name of the Vulnerable Software and Affected Versions Hollo versions prior to 0.6.20 Hollo versions prior to 0.7.2 Description Hollo is a federated single-user microblogging software that utilizes ActivityPub for federation. A security issue exists where direct messages DMs and posts restricted t...