CVE-2026-26718

creationtimestamp| type| source ---|---|--- 2026-07-16 18:50:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrvoapjwx2w 2026-07-16 19:00:06+00:00| seen| Telegram/rNnuPZSkZWDVpEPnyDrVrJ0tqHAdHjPuF4Jq-SaqH-76iI 2026-07-17 00:00:10+00:00| published-proof-of-concept|...

CVE-2026-45336

creationtimestamp| type| source ---|---|--- 2026-07-16 17:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrscyddbi2l 2026-07-16 19:25:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrxndfem52e...

CVE-2026-45568

creationtimestamp| type| source ---|---|--- 2026-07-16 17:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrruonqck2c 2026-07-16 18:39:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrv3zbe6o2l 2026-07-21 04:37:06+00:00| seen|...

CVE-2026-63087

creationtimestamp| type| source ---|---|--- 2026-07-16 16:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqromxze3h2c 2026-07-16 19:09:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrwqns4ep22 2026-07-17 14:00:05+00:00| published-proof-of-concept|...

CVE-2026-63306

creationtimestamp| type| source ---|---|--- 2026-07-16 13:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrel5f6pq2l 2026-07-16 14:54:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrijfgqcq2h...

CVE-2026-63304

creationtimestamp| type| source ---|---|--- 2026-07-16 13:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrehkrzjo2w 2026-07-16 15:10:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrjg32vln2m...

CVE-2023-49900

creationtimestamp| type| source ---|---|--- 2026-07-16 10:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqqztryhh52d 2026-07-16 10:47:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr2p73vnu2i...

CVE-2026-12525

creationtimestamp| type| source ---|---|--- 2026-07-16 08:24:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqsqf6ncd2e 2026-07-16 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116928835008172741 2026-07-16 09:00:31+00:00| seen|...

CVE-2026-15407

The CVE-2026-15407 entry describes an authorization bypass in Themify Builder for WordPress up to version 7.7.7. The underlying issue is insufficient verification of a user’s authorization for actions performed via the tb_generate_on_fly AJAX action, enabling authenticated users with subscriber-l...

CVE-2026-12906

The RTMKit WordPress plugin before 2.0.9 does not perform a capability check in one of its AJAX actions and resolves a request-supplied post identifier directly, allowing users with at least the Contributor role to read the titles of other users' private, draft, pending, scheduled and trashed pos...

EUVD-2026-44879

The RTMKit WordPress plugin before 2.0.9 does not perform a capability check in one of its AJAX actions and resolves a request-supplied post identifier directly, allowing users with at least the Contributor role to read the titles of other users' private, draft, pending, scheduled and trashed pos...

CVE-2026-12434

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitizestatus. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles, full content, excerpts,...

CVE-2026-12434

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure up to version 0.95.0 via sanitize_status. An authenticated attacker with contributor-level access or higher can extract titles, full content, excerpts, dates, authors, and custom-field metadata of other u...

EUVD-2026-44856

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitizestatus. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles, full content, excerpts,...

CVE-2026-12434 List category posts <= 0.95.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'post_status' Shortcode Attribute

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitizestatus. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles, full content, excerpts,...

CVE-2026-12434

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitizestatus. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles, full content, excerpts,...

CVE-2026-46709

creationtimestamp| type| source ---|---|--- 2026-07-15 23:10:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqptrql7f623 2026-07-15 23:11:10+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116926517721073292...

CVE-2026-55652

creationtimestamp| type| source ---|---|--- 2026-07-15 22:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpq5txf2q2w 2026-07-15 23:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpt7o5jtk26 2026-07-16 01:04:56+00:00| seen|...

CVE-2026-46421

creationtimestamp| type| source ---|---|--- 2026-07-15 19:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpi7vnsnr2y 2026-07-15 20:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpljcxnfq2e...

CVE-2026-58658

creationtimestamp| type| source ---|---|--- 2026-07-15 19:02:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpfvsyrp42x 2026-07-15 19:26:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqphawfxma22...