WordPress Tutor LMS – eLearning and online course solution plugin <= 3.9.9 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Post Deletion vulnerability

Insecure Direct Object Reference to Authenticated Instructor+ Arbitrary Post Deletion vulnerability discovered by molten bit in WordPress Plugin Tutor LMS versions = 3.9.9...

CVE-2026-34258

creationtimestamp| type| source ---|---|--- 2026-05-12 14:20:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h 2026-05-12 14:25:05+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnykldwtg2c...

CVE-2026-27682

creationtimestamp| type| source ---|---|--- 2026-05-12 14:20:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h 2026-05-12 14:25:05+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnykldwtg2c...

CVE-2026-0502

creationtimestamp| type| source ---|---|--- 2026-05-12 14:20:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h 2026-05-12 14:25:05+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnykldwtg2c...

CVE-2026-43939 YAF.NET: Stored XSS in Forum Thread Posts/Replies Allowing Arbitrary JavaScript Execution for All Thread Viewers

YetAnotherForum.NET YAF.NET is a C ASP.NET forum. Prior to 4.0.5 and 3.2.12, the thread posting and reply feature accepts user-supplied content via a a post or reply that is stored server-side and later rendered back into the thread page without adequate HTML sanitization or contextual output...

CVE-2026-43939

Summary: CVE-2026-43939 affects YetAnotherForum.NET (YAF.NET) prior to 4.0.5 and 3.2.12, where thread posting/reply content is stored and later rendered without proper HTML sanitization or contextual encoding, enabling Stored XSS across the forum. The underlying issue is unsanitized user input in...

CVE-2026-43939 YAF.NET: Stored XSS in Forum Thread Posts/Replies Allowing Arbitrary JavaScript Execution for All Thread Viewers

YetAnotherForum.NET YAF.NET is a C ASP.NET forum. Prior to 4.0.5 and 3.2.12, the thread posting and reply feature accepts user-supplied content via a a post or reply that is stored server-side and later rendered back into the thread page without adequate HTML sanitization or contextual output...

CVE-2026-43939

YetAnotherForum.NET YAF.NET is a C ASP.NET forum. Prior to 4.0.5 and 3.2.12, the thread posting and reply feature accepts user-supplied content via a a post or reply that is stored server-side and later rendered back into the thread page without adequate HTML sanitization or contextual output...

CVE-2026-43939 YAF.NET: Stored XSS in Forum Thread Posts/Replies Allowing Arbitrary JavaScript Execution for All Thread Viewers

YetAnotherForum.NET YAF.NET is a C ASP.NET forum. Prior to 4.0.5 and 3.2.12, the thread posting and reply feature accepts user-supplied content via a a post or reply that is stored server-side and later rendered back into the thread page without adequate HTML sanitization or contextual output...

CVE-2026-45214

creationtimestamp| type| source ---|---|--- 2026-05-12 11:59:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnqfigyfr2n 2026-05-12 11:59:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnqgkuz7s2g...

CVE-2026-45213

creationtimestamp| type| source ---|---|--- 2026-05-12 11:58:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnqfbe3r62t 2026-05-12 11:59:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnqgdglbg2t...

CVE-2026-45211

creationtimestamp| type| source ---|---|--- 2026-05-12 11:58:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnqf2q7ij2w 2026-05-12 11:59:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnqg3vdmc2g...

CVE-2026-25787

creationtimestamp| type| source ---|---|--- 2026-05-12 11:11:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnnpkhaew2g 2026-05-12 11:29:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlnor6rqcr2n 2026-05-13 13:51:56+00:00| seen|...

CVE-2026-44411

creationtimestamp| type| source ---|---|--- 2026-05-12 10:59:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnn2om35t2z 2026-05-12 11:35:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlnp3h7qgn2v 2026-05-14 10:00:00+00:00| seen|...

CVE-2026-8159

creationtimestamp| type| source ---|---|--- 2026-05-12 08:41:22+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mlnfdvwb3c27 2026-05-12 10:39:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnlwokxtb2g 2026-05-12 11:27:19+00:00| seen|...

CVE-2026-42864

creationtimestamp| type| source ---|---|--- 2026-05-11 20:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlm2wl32sv2z 2026-05-11 20:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlm2wl32sv2z 2026-05-11 20:35:42+00:00| seen|...

CVE-2026-45186

creationtimestamp| type| source ---|---|--- 2026-05-11 19:56:19+00:00| seen| https://bsky.app/profile/news.karthihegde.dev/post/3mlm2lx2ofq23 2026-05-11 19:56:19+00:00| seen| https://bsky.app/profile/news.karthihegde.dev/post/3mlm2lx2ofq23 2026-05-11 20:00:05+00:00| seen|...

CVE-2026-5172

creationtimestamp| type| source ---|---|--- 2026-05-11 18:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllxds6f4v2c 2026-05-11 18:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllxds6f4v2c 2026-05-13 12:31:36+00:00| seen|...

CVE-2026-4892

creationtimestamp| type| source ---|---|--- 2026-05-11 18:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllwxdg4m32k 2026-05-11 18:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllwxdg4m32k 2026-05-12 09:24:59+00:00| seen|...

CVE-2026-41431

creationtimestamp| type| source ---|---|--- 2026-05-11 18:24:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvi2f77q2g 2026-05-11 18:24:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvi2f77q2g 2026-05-11 18:25:04+00:00| seen|...