CVE-2026-8724

creationtimestamp| type| source ---|---|--- 2026-05-17 04:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlzjnxg65o2y 2026-05-17 04:30:45+00:00| seen| https://infosec.exchange/users/offseq/statuses/116588034576668128 2026-05-17 04:52:33+00:00| seen|...

CVE-2026-8657

creationtimestamp| type| source ---|---|--- 2026-05-17 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlz7m3b64q22 2026-05-17 01:30:47+00:00| seen| https://infosec.exchange/users/offseq/statuses/116587326764358912 2026-07-06 06:49:16+00:00| seen|...

CVE-2026-46728

creationtimestamp| type| source ---|---|--- 2026-05-16 22:44:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlyw77gh532i 2026-05-16 23:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlyx6zjxtm2e 2026-05-17 00:00:39+00:00| seen|...

CVE-2026-44366

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting XSS vulnerability exists in the Vvveb CMS comment submission flow. The author field is submitted by an unauthenticated user on any public post...

CVE-2026-44366

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting XSS vulnerability exists in the Vvveb CMS comment submission flow. The author field is submitted by an unauthenticated user on any public post...

CVE-2026-44366 Vvveb: Stored XSS via Comment Author Field

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting XSS vulnerability exists in the Vvveb CMS comment submission flow. The author field is submitted by an unauthenticated user on any public post...

CVE-2026-44366 Vvveb: Stored XSS via Comment Author Field

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting XSS vulnerability exists in the Vvveb CMS comment submission flow. The author field is submitted by an unauthenticated user on any public post...

CVE-2026-44366 Vvveb: Stored XSS via Comment Author Field

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting XSS vulnerability exists in the Vvveb CMS comment submission flow. The author field is submitted by an unauthenticated user on any public post...

EUVD-2026-30588

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting XSS vulnerability exists in the Vvveb CMS comment submission flow. The author field is submitted by an unauthenticated user on any public post...

CVE-2026-46417

creationtimestamp| type| source ---|---|--- 2026-05-15 17:50:55+00:00| seen| https://bsky.app/profile/arigatouz.bsky.social/post/3mlvvhfkrbc2n 2026-05-15 17:51:08+00:00| seen| https://bsky.app/profile/arigatouz.bsky.social/post/3mlvvhfl22k2n 2026-06-22 23:16:24+00:00| seen|...

CVE-2026-2347

creationtimestamp| type| source ---|---|--- 2026-05-14 10:21:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlslusj2hc2n 2026-05-14 10:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116572463385163397 2026-05-14 10:30:32+00:00| seen|...

CVE-2026-6206

The MW WP Form plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.1.2 via the getpostpropertyfromquerystring function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract da...

CVE-2026-3892

creationtimestamp| type| source ---|---|--- 2026-05-14 09:08:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlshrszelm2i 2026-05-14 09:14:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlsi4pzt7o2i...

EUVD-2026-30262

The InfusedWoo Pro plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete...

CVE-2026-6512 InfusedWoo Pro <= 5.1.2 - Unauthenticated Missing Authorization to Arbitrary Post Deletion via Multiple Parameters

The InfusedWoo Pro plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete...

CVE-2026-6206

The MW WP Form plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.1.2 via the getpostpropertyfromquerystring function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract da...

CVE-2026-6206 MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter

The MW WP Form plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.1.2 via the getpostpropertyfromquerystring function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract da...

CVE-2026-6206 MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter

The MW WP Form plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.1.2 via the getpostpropertyfromquerystring function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract da...

CVE-2026-6206 MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter

The MW WP Form plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.1.2 via the getpostpropertyfromquerystring function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract da...

CVE-2026-5395

creationtimestamp| type| source ---|---|--- 2026-05-14 08:02:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlsdz4dcz62t 2026-05-14 09:28:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlsivoihzf2i 2026-05-14 09:36:20+00:00| seen|...