CVE-2026-27361 WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Posts Carousel Pro: from n/a through = 15.1...

CVE-2026-27361

CVE-2026-27361 is a missing/broken authorization vulnerability in the WordPress plugin Responsive Posts Carousel Pro (versions up to 15.1). Public data indicates an exploitable misconfiguration of access control, allowing unauthorized access to protected functionality or data. The CVSSv3.1 base s...

CVE-2026-29127

creationtimestamp| type| source ---|---|--- 2026-03-05 04:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116174686146308685 2026-03-05 04:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mgbxmtt5zd2e 2026-03-05 05:49:24+00:00| seen|...

PT-2026-23244

Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Posts Carousel Pro: from n/a through = 15.1...

WordPress plugin Responsive Posts Carousel Pro 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-2833

creationtimestamp| type| source ---|---|--- 2026-03-04 23:57:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgbienwabx2v 2026-03-05 01:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116173978081466559 2026-03-05 01:30:28+00:00| seen|...

CVE-2026-27803

creationtimestamp| type| source ---|---|--- 2026-03-04 22:17:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgbcruyepi2n 2026-03-04 22:17:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgbcsn66nc2f 2026-03-05 00:06:30+00:00| seen|...

CVE-2026-26673

creationtimestamp| type| source ---|---|--- 2026-03-04 19:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaxsk53c52d 2026-03-04 19:01:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaxtvkql52x...

CVE-2026-20014

creationtimestamp| type| source ---|---|--- 2026-03-04 19:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaxs3eh6r2s 2026-03-04 19:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaxtgl6iq26 2026-03-05 11:03:43+00:00| seen|...

CVE-2026-20049

creationtimestamp| type| source ---|---|--- 2026-03-04 18:29:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavztxq5m2s 2026-03-04 18:29:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaw2sj5as25 2026-03-05 11:03:43+00:00| seen|...

CVE-2026-20039

creationtimestamp| type| source ---|---|--- 2026-03-04 18:29:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavznbcke2k 2026-03-04 18:29:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaw2knlpf2c 2026-03-04 21:52:22+00:00| seen|...

CVE-2026-20100

creationtimestamp| type| source ---|---|--- 2026-03-04 18:29:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavzf6jog2d 2026-03-04 18:29:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaw2cvzun2f 2026-03-05 11:03:43+00:00| seen|...

CVE-2025-70241

creationtimestamp| type| source ---|---|--- 2026-03-04 17:14:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgart6ddyh2t 2026-03-04 17:14:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgartwhijs25...

CVE-2025-70237

creationtimestamp| type| source ---|---|--- 2026-03-04 17:13:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgarsx3mlr2n 2026-03-04 17:14:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgartowgvs2s...

CVE-2025-62814

creationtimestamp| type| source ---|---|--- 2026-03-04 16:31:53+00:00| seen| https://t.me/cKure/16030 2026-03-04 17:14:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgartff3jl2d 2026-03-04 17:14:36+00:00| seen|...

CVE-2026-27441

creationtimestamp| type| source ---|---|--- 2026-03-04 10:08:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mga22qm65b24 2026-03-04 10:49:54+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3mga4e2k2nk2c 2026-03-04 10:49:55+00:00| seen|...

CVE-2026-2363

The WP-Members Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the 'orderby' attribute of the wpmemusermembershipposts shortcode in all versions up to, and including, 3.5.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-29183

creationtimestamp| type| source ---|---|--- 2026-03-04 03:48:11+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-6865-qjcf-286f 2026-03-06 08:20:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgeuwyjvth2c 2026-03-06...

SUSE CVE-2026-22892

Mattermost versions 11.1.x = 11.1.2, 10.11.x = 10.11.9, 11.2.x = 11.2.1 fail to validate user permissions when creating Jira issues from Mattermost posts, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have acce...

CVE-2026-27600

HomeBox is a home inventory and organization system. Prior to 0.24.0-rc.1, the notifier functionality allows authenticated users to specify arbitrary URLs to which the application sends HTTP POST requests. No validation or restriction is applied to the supplied host, IP address, or port. Although...