CVE-2026-33355

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the /private-posts endpoint did not apply post-type visibility filtering, allowing regular PM participants to see whisper posts in PM topics they had access to. Versions 2026.3.0-latest.1...

CVE-2026-33428

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, a non-staff user with elevated group membership could access deleted posts belonging to any user due to an overly broad authorization check on the deleted posts index endpoint. Versions...

CVE-2026-33411

Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a potential stored XSS in topic titles for the solved posts stream. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. As a workaround, ensure that the Content Securi...

CVE-2026-2121

The Weaver Show Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'addclass' parameter in all versions up to, and including, 1.8.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2026-4066

The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relationalpostssearch function in all versions up to, and including, 5.0.6. This makes it possible for authenticated attackers, with Contributor-level access and abov...

CVE-2026-34005

creationtimestamp| type| source ---|---|--- 2026-03-26 15:00:04+00:00| seen| https://t.me/GithubRedTeam/77352 2026-03-26 21:00:04+00:00| published-proof-of-concept| Telegram/EErZ2DHOfxeZ1Fjlnav1XzXAT9awV59GDGk5YYfJrqej7U 2026-03-29 17:18:36+00:00| seen|...

CVE-2026-22323

A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users into sending unauthorized POST requests to the device by luring them to a malicious webpage. This can silently alter the device’s configuration without the...

CVE-2026-4840

creationtimestamp| type| source ---|---|--- 2026-03-26 04:16:40+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4840 2026-03-26 05:18:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwu3eol3e2t 2026-03-26 06:00:32+00:00| seen|...

CVE-2026-4484

creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwmeoazhu27 2026-03-26 03:04:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwmmwoppr2i 2026-03-26 05:01:21+00:00| seen|...

CVE-2026-32680

creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:15+00:00| seen| https://jvn.jp/en/jp/JVN08057419/ 2026-03-26 07:20:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhx2v47k2r2t 2026-03-26 07:30:29+00:00| seen|...

CVE-2026-4758

creationtimestamp| type| source ---|---|--- 2026-03-26 01:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwfp2iqwd2s 2026-03-26 01:15:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwgjfmkf22n...

WordPress plugin Frontend Admin by DynamiApps 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

CVE-2026-32536

creationtimestamp| type| source ---|---|--- 2026-03-25 21:44:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhw2po6s652p 2026-03-25 21:44:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhw2qqqbzk2s 2026-03-25 22:00:43+00:00| seen|...

CVE-2026-32525

creationtimestamp| type| source ---|---|--- 2026-03-25 21:11:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvyvklwbg22 2026-03-25 22:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhw3nla6tk25...

CVE-2026-33661

creationtimestamp| type| source ---|---|--- 2026-03-25 19:30:09+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q938-ghwv-8gvc 2026-03-26 22:20:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyn724yty2p 2026-03-26 23:06:19+00:00| seen|...

CVE-2026-33216

creationtimestamp| type| source ---|---|--- 2026-03-25 19:16:32+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33216 2026-03-25 21:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhvycfbuag2x 2026-03-25 21:26:46+00:00| seen|...

CVE-2026-21717

creationtimestamp| type| source ---|---|--- 2026-03-25 16:26:55+00:00| seen| https://bsky.app/profile/nodejs.org/post/3mhvixzwybc2u 2026-03-25 16:26:56+00:00| seen| https://bsky.app/profile/nodejs.org/post/3mhviy2ktz22u 2026-03-25 16:26:56+00:00| seen|...

CVE-2026-32573

creationtimestamp| type| source ---|---|--- 2026-03-25 16:17:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32573 2026-03-25 21:06:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvymm4qna23 2026-03-25 21:44:00+00:00| seen|...

CVE-2026-32546

creationtimestamp| type| source ---|---|--- 2026-03-25 16:17:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32546 2026-03-25 21:02:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhvyfbnhco2r 2026-03-25 21:03:13+00:00| seen|...

CVE-2026-33989

creationtimestamp| type| source ---|---|--- 2026-03-25 16:16:33+00:00| published-proof-of-concept| https://github.com/mobile-next/mobile-mcp/security/advisories/GHSA-3p2m-h2v6-g9mx 2026-03-27 22:24:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi35vvieqx2d 2026-03-27...