WordPress WP Meta Sort Posts plugin <= 0.9 - Cross-Site Request Forgery to Plugin Settings Update vulnerability

Cross-Site Request Forgery to Plugin Settings Update vulnerability discovered by afnaan - SMKN 1 Bantul in WordPress Plugin WP Meta Sort Posts versions = 0.9...

CVE-2026-11503

creationtimestamp| type| source ---|---|--- 2026-06-08 10:30:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnri2bwqn322 2026-06-08 10:30:51+00:00| seen| https://infosec.exchange/users/offseq/statuses/116714021744747488 2026-06-08 11:25:46+00:00| seen|...

CVE-2023-54350

creationtimestamp| type| source ---|---|--- 2026-06-08 04:43:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqunkjorx24 2026-06-08 05:06:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqvxf4enc2d 2026-06-15 07:07:22+00:00| seen|...

CVE-2023-54352

creationtimestamp| type| source ---|---|--- 2026-06-08 04:40:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnquhzn7fz2y 2026-06-08 05:19:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqwopxp2k2v 2026-06-13 13:07:22+00:00| seen|...

CVE-2026-6420

creationtimestamp| type| source ---|---|--- 2026-06-07 16:49:08+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnpmpzrvus2z 2026-06-07 16:49:09+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnpmq3br4s2z...

CVE-2026-7665

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajaxloadmore function due to insufficient restrictions on which posts can be included. This makes it possible f...

CVE-2026-11451

creationtimestamp| type| source ---|---|--- 2026-06-07 04:49:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnoejbd7pt22 2026-06-07 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116707650683946203 2026-06-07 07:30:26+00:00| seen|...

CVE-2026-49494

creationtimestamp| type| source ---|---|--- 2026-06-07 04:16:20+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-49494 2026-06-07 12:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnp6tprsqw25 2026-06-07 13:24:19+00:00| seen|...

CVE-2026-8976

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action...

CVE-2026-7665

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajaxloadmore function due to insufficient restrictions on which posts can be included. This makes it possible f...

CVE-2026-7665

CVE-2026-7665 affects the WordPress plugin Essential Addons for Elementor (up to version 6.6.4). The issue arises in the ajax_load_more handler, with insufficient restrictions on which posts can be returned, enabling unauthenticated attackers to extract data from password-protected, private, or d...

CVE-2026-7665

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajaxloadmore function due to insufficient restrictions on which posts can be included. This makes it possible f...

CVE-2026-7665 Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajaxloadmore function due to insufficient restrictions on which posts can be included. This makes it possible f...

CVE-2026-7665 Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajaxloadmore function due to insufficient restrictions on which posts can be included. This makes it possible f...

EUVD-2026-34950

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajaxloadmore function due to insufficient restrictions on which posts can be included. This makes it possible f...

EUVD-2026-34932

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action...

CVE-2026-8976

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action...

WordPress plugin RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-47130

Name of the Vulnerable Software and Affected Versions Essential Addons for Elementor versions prior to 6.6.5 Description The plugin is subject to information exposure due to insufficient restrictions on the posts that can be included within the ajax load more function. This allows unauthenticated...

WordPress plugin Essential Addons for Elementor – Popular Elementor Templates & Widgets 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...