CVE-2026-1009

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

CVE-2026-1009 Stored Cross-Site Scripting in Altium Live Forum Leading to Cross-Customer Data Exposure

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

CVE-2025-70893

creationtimestamp| type| source ---|---|--- 2026-01-15 22:43:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcinusvxs42m 2026-01-15 22:44:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcinv7lyo32z...

CVE-2026-21907

creationtimestamp| type| source ---|---|--- 2026-01-15 21:41:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcikepwyxf2m 2026-01-15 21:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcikrtdkxq2m...

CVE-2026-23527

creationtimestamp| type| source ---|---|--- 2026-01-15 21:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcii4gs3lp2a 2026-01-15 21:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcii4wjrn22u 2026-01-24 21:24:17+00:00| seen|...

CVE-2026-23520

creationtimestamp| type| source ---|---|--- 2026-01-15 21:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcii4bwuop2v 2026-01-15 21:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcii4oji4w2m 2026-01-19 22:53:00+00:00| seen|...

CVE-2025-36911

creationtimestamp| type| source ---|---|--- 2026-01-15 19:03:55+00:00| seen| https://bsky.app/profile/lalgorisme.bsky.social/post/3mciblg6zac24 2026-01-15 19:03:55+00:00| seen| https://bsky.app/profile/lalgorisme.bsky.social/post/3mciblg6qh224 2026-01-15 19:03:56+00:00| seen|...

CVE-2026-22265

creationtimestamp| type| source ---|---|--- 2026-01-15 17:43:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci5462lsp2u 2026-01-15 17:44:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci564g42y2u...

CVE-2026-23493

creationtimestamp| type| source ---|---|--- 2026-01-15 17:43:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci537dtkx2u 2026-01-15 17:43:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci53xg3ti2g 2026-01-15 18:07:30+00:00| seen|...

WordPress Related Posts Thumbnails Plugin for WordPress plugin <= 4.3.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Carlos Ferreira in WordPress Plugin Related Posts Thumbnails Plugin for WordPress versions = 4.3.2...

CVE-2025-13062

creationtimestamp| type| source ---|---|--- 2026-01-15 14:43:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchsznpigd2g 2026-01-15 14:43:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcht2hipda2e...

CVE-2026-22638

creationtimestamp| type| source ---|---|--- 2026-01-15 14:43:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchszgdjha2z 2026-01-15 14:43:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcht2a7wnb2u 2026-01-15 15:12:34+00:00| seen|...

CVE-2026-22643

creationtimestamp| type| source ---|---|--- 2026-01-15 14:43:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchsz6yior2f 2026-01-15 14:43:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchszz4er322 2026-01-15 15:12:34+00:00| seen|...

CVE-2026-0712

creationtimestamp| type| source ---|---|--- 2026-01-15 13:51:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq5onbx22e 2026-01-15 13:52:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq6hbhlo2a 2026-01-15 15:12:33+00:00| seen|...

CVE-2026-0813

The Short Link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shortlinkposttitle' and 'shortlinkpagetitle' parameters in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

Altium 365 security vulnerabilities

Altium 365 is a product design and development platform provided by the American company Altium. There is a security vulnerability in Altium 365, which stems from the lack of server-side input sanitization in the forum posts. This vulnerability may lead to storage-based cross-site scripting attac...

CVE-2025-70968

creationtimestamp| type| source ---|---|--- 2026-01-14 18:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcfnmukgqy2f 2026-01-14 19:37:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcfszcx5gl2q...

CVE-2026-21267

creationtimestamp| type| source ---|---|--- 2026-01-14 06:15:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mceg6qqjiv22 2026-01-14 06:16:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcegaovo622z...

CVE-2026-21281

creationtimestamp| type| source ---|---|--- 2026-01-14 06:15:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mceg6k7mbk2z 2026-01-14 06:16:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcegah43hy2b...

CVE-2025-37168

creationtimestamp| type| source ---|---|--- 2026-01-14 06:15:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mceg6dk7ox2p 2026-01-14 06:16:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcega74kpn2v...