CVE-2026-1655

The EventPrime plugin for WordPress is vulnerable to unauthorized post modification due to missing authorization checks in all versions up to, and including, 4.2.8.4. This is due to the savefrontendeventsubmission function accepting a user-controlled eventid parameter and updating the correspondi...

CVE-2026-1655

CVE-2026-1655 — EventPrime for WordPress : Unauthorized post modification due to missing authorization checks in save_frontend_event_submission, which uses a user-controlled event_id to update posts. Affected versions are up to 4.2.8.4; patch exists in 4.2.8.4+. The issue allows authenticated (Cu...

CVE-2026-1714

creationtimestamp| type| source ---|---|--- 2026-02-18 05:20:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4dg4om5y2n 2026-02-18 05:20:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4dgodgjv2c...

CVE-2026-2576

creationtimestamp| type| source ---|---|--- 2026-02-18 05:20:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4dfvkk7t2s 2026-02-18 05:20:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4dgh6zvt2v 2026-03-27 00:00:04+00:00|...

CVE-2025-12074

The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'contextblogmodalpopup' due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from passwor...

CVE-2025-12074

The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'contextblogmodalpopup' due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from passwor...

CVE-2025-12074 Context Blog <= 1.2.5 - Unauthenticated Private Post Disclosure

The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'contextblogmodalpopup' due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from passwor...

CVE-2025-12074 Context Blog <= 1.2.5 - Unauthenticated Private Post Disclosure

The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'contextblogmodalpopup' due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from passwor...

CVE-2025-12074

CVE-2025-12074 affects Context Blog (WordPress theme) up to version 1.2.5, enabling unauthenticated information exposure through context_blog_modal_popup due to insufficient post-access restrictions. Impact is exposure of data from password-protected, private, or draft posts. Public advisories fr...

CVE-2026-23599

creationtimestamp| type| source ---|---|--- 2026-02-18 00:16:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf3shdxvmq2v 2026-02-18 01:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mf3wl5z6nx2w 2026-02-18 01:30:32+00:00| seen|...

PT-2026-20387

The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 6.4.7. This is due to the tpae create page AJAX handler authorizing users only with current...

WordPress plugin Blog2Social: Social Media Auto Post & Scheduler 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress plugin EventPrime 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-20219

Name of the Vulnerable Software and Affected Versions Context Blog theme for WordPress versions through 1.2.5 Description The Context Blog theme for WordPress is susceptible to information disclosure in versions up to and including 1.2.5. This is due to inadequate restrictions on post inclusion...

WordPress plugin User Submitted Posts – Enable Users to Submit Posts from the Front End 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

PT-2026-20377

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 20260113. This is due to the usp get submitted category function accepting user-submitted category IDs from the POST body...

CVE-2026-26280

creationtimestamp| type| source ---|---|--- 2026-02-17 19:07:11+00:00| published-proof-of-concept| https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-9c88-49p5-5ggf 2026-02-19 21:01:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfaiiph3fr2h...

CVE-2026-0929

creationtimestamp| type| source ---|---|--- 2026-02-17 16:13:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2xhhdjxy2c 2026-02-17 16:13:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2xhqm46e26...

PT-2026-23532

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.2 OpenClaw versions 2026.1.30 and earlier Description When Telegram webhook mode is enabled without a configured webhook secret, the software may accept unauthenticated HTTP POST requests at the Telegram webho...

CVE-2026-2101

creationtimestamp| type| source ---|---|--- 2026-02-16 22:34:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mez4azsldg26 2026-02-16 22:35:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mez4cgro5n25...