EUVD-2025-210644

The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the editposts capability from reading globally password-protected content through the WordPress core REST API when global protection is enabled, allowing any Contributor or higher to read the content of...

CVE-2026-14943: Exposure of Sensitive Information to an Unauthorized Actor

The Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content WordPress plugin before 2.8.4 does not restrict REST API access to authenticated users when a specific option is enabled, allowing unauthenticated visitors to bypass the sitewide password gate and read...

CVE-2026-71447

AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts. The affected templates inserted message and post identifiers directly into inline JavaScript onclick handlers: onclick="translateMessageToPreferredLanguage'...

CVE-2025-15674 Content Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST API

The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the editposts capability from reading globally password-protected content through the WordPress core REST API when global protection is enabled, allowing any Contributor or higher to read the content of...

CVE-2025-15674 Content Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST API

The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the editposts capability from reading globally password-protected content through the WordPress core REST API when global protection is enabled, allowing any Contributor or higher to read the content of...

CVE-2025-15674

Passster (WordPress plugin) before 4.3.7 allows low-privilege users with edit_posts capability to read globally password-protected content via the WordPress REST API when global protection is enabled. Any Contributor or higher can access protected pages/posts without the password. A fix is availa...

CVE-2026-71447 Stored Cross-Site Scripting in Chat and Forum Translation Controls in ail-framework

AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts. The affected templates inserted message and post identifiers directly into inline JavaScript onclick handlers: onclick="translateMessageToPreferredLanguage'...

CVE-2026-71447

AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts. The affected templates inserted message and post identifiers directly into inline JavaScript onclick handlers: onclick="translateMessageToPreferredLanguage'...

CVE-2026-71447

CVE-2026-71447 : In the AIL Project (ail-framework), translation controls for chat messages and forum posts store identifiers into inline JavaScript onclick handlers without safe encoding for JS string literals. Although escaping is applied for HTML, the values can terminate the string argument, ...

CVE-2026-71447 Stored Cross-Site Scripting in Chat and Forum Translation Controls in ail-framework

AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts. The affected templates inserted message and post identifiers directly into inline JavaScript onclick handlers: onclick="translateMessageToPreferredLanguage'...

CVE-2026-71447 Stored Cross-Site Scripting in Chat and Forum Translation Controls in ail-framework

AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts. The affected templates inserted message and post identifiers directly into inline JavaScript onclick handlers: onclick="translateMessageToPreferredLanguage'...

CVE-2026-66709

creationtimestamp| type| source ---|---|--- 2026-08-06 16:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggxseog32p 2026-08-06 21:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgws3k3xd2l...

CVE-2026-65575

creationtimestamp| type| source ---|---|--- 2026-08-06 16:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggn4vxwm2a 2026-08-06 18:06:42+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msgn22kamc2e 2026-08-06 18:06:45+00:00| seen|...

CVE-2026-66710

creationtimestamp| type| source ---|---|--- 2026-08-06 16:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgfzgsj2h2z 2026-08-06 16:08:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/clljb6nruttbm...

CVE-2026-63687

creationtimestamp| type| source ---|---|--- 2026-08-06 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgffqh7u42u 2026-08-06 21:11:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/fqsngttlj2rzl 2026-08-07 10:07:06+00:00| seen|...

CVE-2026-68079

creationtimestamp| type| source ---|---|--- 2026-08-06 15:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfc5inum2h 2026-08-06 21:24:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/i4vkmjasii72h 2026-08-07 04:07:06+00:00| seen|...

CVE-2026-64564

creationtimestamp| type| source ---|---|--- 2026-08-06 15:03:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/55u7vzwmlbett 2026-08-06 15:22:49+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/117049246952190178 2026-08-06 15:25:14+00:00| seen|...

CVE-2026-18970

creationtimestamp| type| source ---|---|--- 2026-08-06 11:00:40+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117048216095721886 2026-08-06 11:00:40+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msfva7xipf2t...

WordPress TableOn – WordPress Posts Table Filterable  plugin <= 1.0.5.1 - Unauthenticated Blind SQL Injection vulnerability

Unauthenticated Blind SQL Injection vulnerability discovered by Athiwat Tiprasaharn Jitlada, Itthidej Aramsri Boeing777, Waris Damkham in WordPress Plugin TableOn versions = 1.0.5.1...

CVE-2026-18400

The Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'delay' Post Meta Setting in all versions up to, and including, 3.111.0 due to insufficient input sanitization and output escaping. This makes it...