EUVD-2026-42949

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Arbitrary Post Creation and Stored Cross-Site Scripting in all versions up to, and including, 14.0.0 due to a leak of an API token and insufficient input sanitization and output escaping. This makes it possible for unauthenticat...

CVE-2026-61444

creationtimestamp| type| source ---|---|--- 2026-07-10 16:15:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqck7yabkh27 2026-07-10 16:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqclwzjjnb2f 2026-07-10 20:16:31+00:00| seen|...

CVE-2026-11990

creationtimestamp| type| source ---|---|--- 2026-07-10 12:32:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc5r4f2p52z 2026-07-10 13:23:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcamqmmvf22 2026-07-11 00:44:17+00:00| seen|...

CVE-2026-6440

creationtimestamp| type| source ---|---|--- 2026-07-10 11:55:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc3pxzoud2e 2026-07-10 12:11:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4m2khqd27 2026-07-10 21:17:59+00:00| seen|...

CVE-2026-21041

creationtimestamp| type| source ---|---|--- 2026-07-10 08:08:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqboymq5bl2e 2026-07-10 09:36:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbtxonpzj2e...

CVE-2026-11392

creationtimestamp| type| source ---|---|--- 2026-07-10 05:38:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgn4q6ib2x 2026-07-10 05:38:37+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqbgniwg4v2k...

CVE-2026-15070

creationtimestamp| type| source ---|---|--- 2026-07-10 05:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqbejh3oro2m 2026-07-10 05:30:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbg7q26bd2w 2026-07-10 05:52:25+00:00| seen|...

CVE-2026-14894

creationtimestamp| type| source ---|---|--- 2026-07-10 04:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116893799245990836 2026-07-10 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqbctmoxsp2t 2026-07-10 05:00:33+00:00| seen|...

PT-2026-57258

Name of the Vulnerable Software and Affected Versions Deloitte AI Assist for Customer affected versions not specified Description Public-facing API endpoints accepted unauthenticated POST requests, allowing a remote attacker to make limited additions to the configuration. These additions were not...

CVE-2026-6910

creationtimestamp| type| source ---|---|--- 2026-07-09 23:09:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqvh3tlj2a 2026-07-09 23:09:24+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqaqvitzmm2k...

CVE-2026-4653

creationtimestamp| type| source ---|---|--- 2026-07-09 23:07:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqs2htoe2y 2026-07-09 23:07:28+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqaqs2m7yb27...

CVE-2026-58122

creationtimestamp| type| source ---|---|--- 2026-07-09 21:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqamhqf4fl2z 2026-07-09 22:59:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqaqdeat3r27 2026-07-09 23:01:52+00:00| seen|...

MAL-2026-10081 Malicious code in webrix-docs1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cdefe1415c5b5245f36b10ea0de9033433b479768c2cc785ad2742b9433fce The package declares a preinstall hook node index.js that fires automatically on npm install. The script requires childprocess, os, https, and http,...

MAL-2026-10019 Malicious code in client-cookies-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12870ae203f2612ab2bf9e796583acba17914cd4699909156f86c643fcf51f24 package.json declares postinstall=node index.js, which runs automatically on npm install. index.js collects host identifiers via os.hostname,...

CVE-2026-50644

creationtimestamp| type| source ---|---|--- 2026-07-09 12:05:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7lrrsktt2i 2026-07-09 12:15:09+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-50644...

CVE-2026-56291

creationtimestamp| type| source ---|---|--- 2026-07-09 12:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116889906648087046 2026-07-09 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq7ljhukn42i 2026-07-09 12:03:01+00:00| seen|...

CVE-2026-12428

The Blocks for ACF Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getallvalues function in the /wp-json/acf-field-blocks/v1/values REST endpoint in versions up to, and including, 1.6.2. The permissioncallback only verifies the...

EUVD-2026-42568

The Blocks for ACF Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getallvalues function in the /wp-json/acf-field-blocks/v1/values REST endpoint in versions up to, and including, 1.6.2. The permissioncallback only verifies the...

CVE-2026-47840

creationtimestamp| type| source ---|---|--- 2026-07-09 07:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq75qsv2b42w 2026-07-09 08:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7afnzxnt27 2026-07-09 17:37:25+00:00| seen|...

Meta's New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images

Meta has announced that its new artificial intelligence AI model Muse Image lets people use public Instagram posts and reels to generate AI content, and it's enabled by default. "You can also @-mention Instagram accounts in the Meta AI app to bring specific Instagram profiles right into your...