PT-2026-4424

Name of the Vulnerable Software and Affected Versions kutsy AJAX Hits Counter + Popular Posts Widget versions through 0.10.210305 Description An issue exists in kutsy AJAX Hits Counter + Popular Posts Widget related to incorrectly configured access control security levels, potentially allowing...

PT-2026-4431

Name of the Vulnerable Software and Affected Versions Related Posts Thumbnails Plugin for WordPress versions through 4.3.1 Description The Related Posts Thumbnails Plugin for WordPress is susceptible to a Cross-Site Request Forgery issue. This allows attackers to potentially perform actions on...

WordPress Plugin: Related Posts Thumbnails Plugin for WordPress – Security Vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

CVE-2026-24587: Missing Authorization

Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through = 0.10.210305...

CVE-2026-23954

creationtimestamp| type| source ---|---|--- 2026-01-22 19:07:39+00:00| published-proof-of-concept| https://github.com/lxc/incus/security/advisories/GHSA-7f67-crqm-jgh7 2026-01-22 23:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md2c43xfaz2m 2026-01-22 23:24:08+00:00|...

CVE-2026-22347

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in subhansanjaya Carousel Horizontal Posts Content Slider carousel-horizontal-posts-content-slider allows DOM-Based XSS.This issue affects Carousel Horizontal Posts Content Slider: from n/a through =...

CVE-2025-69316

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through = 1.0.4.2...

CVE-2025-52762

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flexostudio flexo-posts-manager flexo-posts-manager allows Reflected XSS.This issue affects flexo-posts-manager: from n/a through = 1.0001...

CVE-2026-22347

CVE-2026-22347 affects the WordPress plugin Carousel Horizontal Posts Content Slider (

CVE-2026-22347

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in subhansanjaya Carousel Horizontal Posts Content Slider carousel-horizontal-posts-content-slider allows DOM-Based XSS.This issue affects Carousel Horizontal Posts Content Slider: from n/a through =...

CVE-2026-22347 WordPress Carousel Horizontal Posts Content Slider plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in subhansanjaya Carousel Horizontal Posts Content Slider carousel-horizontal-posts-content-slider allows DOM-Based XSS.This issue affects Carousel Horizontal Posts Content Slider: from n/a through =...

CVE-2025-69316 WordPress TableOn plugin <= 1.0.4.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through = 1.0.4.2...

CVE-2025-69316

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through = 1.0.4.2...

CVE-2025-69316

CVE-2025-69316: RealMag777 TableOn posts-table-filterable has a Reflected XSS in versions up to 1.0.4.2. Root cause: improper input neutralization during web page generation. Impact: reflected cross-site scripting; CVSS base 7.1 (HIGH). Remediation: the vulnerability entry is marked as patched in...

CVE-2025-69316 WordPress TableOn plugin <= 1.0.4.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through = 1.0.4.2...

CVE-2025-52762

CVE-2025-52762 is a reflected XSS vulnerability in the WordPress plugin family flexo-posts-manager (flexostudio flexo-posts-manager) affecting versions through 1.0001. The issue arises from improper neutralization of input during web page generation, enabling attacker-supplied data to be reflecte...

CVE-2025-52762 WordPress flexo-posts-manager Plugin <= 1.0001 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flexostudio flexo-posts-manager flexo-posts-manager allows Reflected XSS.This issue affects flexo-posts-manager: from n/a through = 1.0001...

CVE-2025-52762 WordPress flexo-posts-manager Plugin <= 1.0001 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flexostudio flexo-posts-manager flexo-posts-manager allows Reflected XSS.This issue affects flexo-posts-manager: from n/a through = 1.0001...

CVE-2025-52762

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flexostudio flexo-posts-manager flexo-posts-manager allows Reflected XSS.This issue affects flexo-posts-manager: from n/a through = 1.0001...

CVE-2025-36588

creationtimestamp| type| source ---|---|--- 2026-01-22 16:23:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mczlu6si6n2x 2026-01-22 16:23:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mczlushklu2m 2026-01-22 20:27:42+00:00| seen|...