CVE-2026-14305

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...

CVE-2026-14305 WP Delicious < 1.10.2 - Unauthenticated Arbitrary Post Meta Update via recipe_likes

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...

CVE-2026-14305

CVE-2026-14305 affects the WP Delicious WordPress plugin (before 1.10.2). The root cause is missing authorization for a specific AJAX action, permitting unauthenticated users to modify limited post metadata (a like counter and an associated identifier list) on arbitrary posts. This can inflate th...

EUVD-2026-51015

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...

CVE-2026-14231 LifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_posts

The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing any authenticated user with subscriber-level access to read the titles of internal post types such as coupon codes by...

CVE-2026-15975

creationtimestamp| type| source ---|---|--- 2026-07-30 04:45:25+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 05:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtnuxzugp2q 2026-07-30 14:15:31+00:00| seen|...

CVE-2026-67432

creationtimestamp| type| source ---|---|--- 2026-07-29 20:57:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsstprxqw2i 2026-07-29 21:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrsszcbcnl22 2026-07-30 16:35:23+00:00| published-proof-of-concept|...

CVE-2021-29490

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/3927 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/4060 2026-07-29 12:00:58+00:00| seen| https://t.me/CVEhub/3440 2026-07-29 12:01:01+00:00| seen| https://t.me/CVEhub/2139 2026-07-29...

CVE-2026-47876

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrruttu6fz24 2026-07-29 12:13:55+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrrvltod7t2w 2026-07-29 12:13:58+00:00| seen|...

CVE-2023-25292

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:29+00:00| seen| https://t.me/CVEhub/13731 2026-07-29 12:00:35+00:00| seen| https://t.me/CVEhub/11565 2026-07-30 00:00:52+00:00| seen| https://t.me/CVEhub/13731 2026-07-30 01:00:41+00:00| seen| https://t.me/CVEhub/11565 2026-07-31...

CVE-2023-28178

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:26+00:00| seen| https://t.me/CVEhub/14465 2026-07-29 12:00:26+00:00| seen| https://t.me/CVEhub/14467 2026-07-30 00:00:48+00:00| seen| https://t.me/CVEhub/14465 2026-07-30 01:00:33+00:00| seen| https://t.me/CVEhub/14467 2026-07-31...

CVE-2026-58154

creationtimestamp| type| source ---|---|--- 2026-07-29 10:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrokt44tz2r 2026-07-29 11:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrt2y3gqf27 2026-07-30 16:34:04+00:00| seen|...

EUVD-2026-50274

The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the templateredirect dispatcher in the MB Frontend Submission extension in versions up to, and including, 3.8.0. This is due to the handlerequest function routing the mbfsdelete action without any capability or...

CVE-2026-14488 Meta Box AIO <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'rwmb_frontend_field_object_id' Parameter

The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the templateredirect dispatcher in the MB Frontend Submission extension in versions up to, and including, 3.8.0. This is due to the handlerequest function routing the mbfsdelete action without any capability or...

CVE-2026-60004

creationtimestamp| type| source ---|---|--- 2026-07-29 07:59:42+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrhfbohdx2w 2026-07-29 08:02:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mrrhkep54z23 2026-07-29 09:00:07+00:00| seen|...

CVE-2026-65094

creationtimestamp| type| source ---|---|--- 2026-07-29 02:15:51+00:00| seen| https://bsky.app/profile/potato.software/post/3mrqu6gweue2n 2026-07-29 02:15:51+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrqu6fq7xr2v 2026-07-29 16:05:35+00:00| seen|...

CVE-2026-54650

creationtimestamp| type| source ---|---|--- 2026-07-29 02:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqtdm6wwg23 2026-07-29 02:46:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqvvxefvd2s 2026-07-29 03:32:05+00:00| seen|...

CVE-2026-12938

The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' attribute of the newsletterspost shortcode in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postssingle function which propagates...

CVE-2026-64863

creationtimestamp| type| source ---|---|--- 2026-07-28 23:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqm5e554m22 2026-07-29 00:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqmmv237e2q 2026-07-29 00:35:05+00:00|...

CVE-2026-14996

creationtimestamp| type| source ---|---|--- 2026-07-28 22:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqfvwf55v2d 2026-07-28 23:06:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqjm5hnqn22...