PT-2026-22186

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2025.12.2 Discourse versions prior to 2026.1.1 Discourse versions prior to 2026.2.0 Description Discourse, an open source discussion platform, had an issue where the move posts action did not properly validate write...

PT-2026-22194

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2025.12.2 Discourse versions prior to 2026.1.1 Discourse versions prior to 2026.2.0 Description Discourse, an open source discussion platform, contains a flaw where a user's full name can be interpreted as raw HTML...

PT-2026-22188

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2025.12.2 Discourse versions prior to 2026.1.1 Discourse versions prior to 2026.2.0 Description Discourse, an open source discussion platform, had an issue where the posts nearby function was not properly filtering...

PT-2026-22154

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2025.12.2 Discourse versions prior to 2026.1.1 Discourse versions prior to 2026.2.0 Description Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, the...

CVE-2025-69985

creationtimestamp| type| source ---|---|--- 2026-02-25 20:06:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpi6yvfbv2h 2026-02-25 20:07:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpib4lrfh2v 2026-03-24 17:00:40+00:00|...

CVE-2026-24890

creationtimestamp| type| source ---|---|--- 2026-02-25 19:57:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfphok42qj2n 2026-02-25 19:57:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfphpkqtzo2s 2026-02-25 20:00:16+00:00| seen|...

CVE-2026-27706

creationtimestamp| type| source ---|---|--- 2026-02-25 17:40:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfp7zm72fb2c 2026-02-25 17:40:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpa2ehrcy26 2026-03-01 00:00:17+00:00| seen|...

CVE-2026-20128

creationtimestamp| type| source ---|---|--- 2026-02-25 16:34:22+00:00| seen| https://vulnerability.circl.lu/bundle/b24f0b20-207c-4881-af91-eb1d15b224ba 2026-02-25 17:00:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfp5rtagrx26 2026-02-25 17:29:05+00:00| seen|...

CVE-2026-20126

creationtimestamp| type| source ---|---|--- 2026-02-25 16:34:22+00:00| seen| https://vulnerability.circl.lu/bundle/b24f0b20-207c-4881-af91-eb1d15b224ba 2026-02-25 17:00:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfp5rtagrx26 2026-02-25 17:29:05+00:00| seen|...

CVE-2026-1916

creationtimestamp| type| source ---|---|--- 2026-02-25 09:37:05+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfoezmuju42h 2026-02-25 09:42:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfofcn3xjv2k 2026-02-25 10:01:30+00:00| seen|...

CVE-2026-1916

The WPGSI: Spreadsheet Integration plugin for WordPress is vulnerable to unauthorized modification and loss of data due to missing capability checks and an insecure authentication mechanism on the wpgsicallBackFuncAccept and wpgsicallBackFuncUpdate REST API functions in all versions up to, and...

WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Responsive Posts Carousel Pro versions = 15.1...

CVE-2026-27730

creationtimestamp| type| source ---|---|--- 2026-02-25 07:14:26+00:00| published-proof-of-concept| https://github.com/esm-dev/esm.sh/security/advisories/GHSA-p2v6-84h2-5x4r 2026-02-25 17:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfp5tgnldv2s 2026-02-25...

CVE-2026-27627

creationtimestamp| type| source ---|---|--- 2026-02-25 04:18:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnt7hc2ky2t 2026-02-25 05:30:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnxa5vvd42n 2026-03-01 03:40:09+00:00| seen|...

CVE-2026-25131

creationtimestamp| type| source ---|---|--- 2026-02-25 02:18:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnmjzxfzu2s 2026-02-25 02:57:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnophssvg2u 2026-02-25 18:40:10+00:00| seen|...

CVE-2026-24849

creationtimestamp| type| source ---|---|--- 2026-02-25 02:18:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnmjspy6u26 2026-02-25 02:18:46+00:00| seen| https://bsky.app/profile/potato.software/post/3mfnmjtpx442w 2026-02-25 03:12:43+00:00| seen|...

PT-2026-21887

Name of the Vulnerable Software and Affected Versions WPGSI: Spreadsheet Integration plugin for WordPress versions through 3.8.3 Description The WPGSI: Spreadsheet Integration plugin for WordPress is susceptible to unauthorized modification and data loss. This is due to the absence of proper...

PT-2026-21893

The Post Duplicator plugin for WordPress is vulnerable to unauthorized arbitrary protected post meta insertion in all versions up to, and including, 3.0.8. This is due to the duplicate post function in includes/api.php using $wpdb-insert directly to the wp postmeta table instead of WordPress's...

CVE-2026-27593

creationtimestamp| type| source ---|---|--- 2026-02-24 22:17:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfn72ggenz2s 2026-02-24 23:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfnbheklrk2n 2026-02-24 23:00:35+00:00| seen|...

CVE-2026-22765

creationtimestamp| type| source ---|---|--- 2026-02-24 20:29:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmyyikjcx2x 2026-02-24 20:29:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmyzbgf2j2v 2026-02-24 21:56:59+00:00| seen|...