CVE-2026-22892 Insufficient Authorization in Mattermost Jira Plugin Allows Unauthorized Access to Post Attachments

Mattermost versions 11.1.x = 11.1.2, 10.11.x = 10.11.9, 11.2.x = 11.2.1 fail to validate user permissions when creating Jira issues from Mattermost posts, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have acce...

GHSA-8WC6-VGRQ-X6CF

creationtimestamp| type| source ---|---|--- 2026-02-13 09:47:36+00:00| seen| https://bsky.app/profile/renovatebot.com/post/3meq7zfb6b22w 2026-02-13 09:47:37+00:00| seen| https://bsky.app/profile/renovatebot.com/post/3meq7zfbg322w 2026-02-14 14:10:28+00:00| seen|...

CVE-2026-21521

creationtimestamp| type| source ---|---|--- 2026-02-13 04:55:23+00:00| seen| https://bsky.app/profile/yourlamentablefriends.com/post/3meppoqajec2e 2026-02-13 04:55:29+00:00| seen| https://bsky.app/profile/yourlamentablefriends.com/post/3mepposicac2e 2026-02-13 04:55:33+00:00| seen|...

PT-2026-25759

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.0 through 10.11.10 Mattermost versions 11.2.0 through 11.2.2 Mattermost versions 11.3.0 Description Mattermost does not correctly enforce read permissions in the search API endpoints. This allows guest users without...

Mattermost 安全漏洞

Mattermost is an open-source collaboration platform developed by the American company Mattermost. Vulnerabilities exist in Mattermost versions 11.1.2 and earlier of the 11.1.x series, as well as versions 10.11.9 and earlier of the 10.11.x series, and 11.2.1 and earlier of the 11.2.x series. These...

PT-2026-7985

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.x through 10.11.9 Mattermost versions 11.1.x through 11.1.2 Mattermost versions 11.2.x through 11.2.1 Description The software does not properly validate user permissions when creating Jira issues from Mattermost post...

CVE-2026-26217

creationtimestamp| type| source ---|---|--- 2026-02-12 16:00:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meoeev3veh2u 2026-02-12 16:00:20+00:00| seen| https://infosec.exchange/users/offseq/statuses/116058489848351725 2026-02-13 09:23:33+00:00| seen|...

CVE-2025-14014

creationtimestamp| type| source ---|---|--- 2026-02-12 15:51:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meoduiqdr323 2026-02-12 15:52:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meodw5kv6v2v...

CVE-2026-1104

creationtimestamp| type| source ---|---|--- 2026-02-12 15:51:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meodubg5xh22 2026-02-12 15:51:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meodvwpncu2g...

CVE-2025-10969

creationtimestamp| type| source ---|---|--- 2026-02-12 14:19:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6qfj3az25 2026-02-12 14:20:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6sispdb24 2026-02-12 14:23:04+00:00| seen|...

CVE-2026-2007

creationtimestamp| type| source ---|---|--- 2026-02-12 14:19:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6q6pof52g 2026-02-12 14:19:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6qzakzl2r 2026-02-13 15:05:18+00:00| seen|...

CVE-2026-2006

creationtimestamp| type| source ---|---|--- 2026-02-12 14:18:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6p6h2br25 2026-02-12 14:19:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6pxuj7e2g 2026-02-13 15:05:17+00:00| seen|...

CVE-2019-25306

creationtimestamp| type| source ---|---|--- 2026-02-12 14:16:18+00:00| seen| https://bsky.app/profile/postacc.bsky.social/post/3meo6kxhekw2u 2026-02-12 14:23:34+00:00| seen| https://bsky.app/profile/postacc.bsky.social/post/3meo6xwvnkp2u 2026-02-12 14:32:29+00:00| seen|...

CVE-2026-2295

The WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajaxpostgridloadmore' function in all versions up to, and including, 1.3.2. This makes it possible for unauthenticated attacker...

CVE-2026-1786

The Twitter posts to Blog plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'dgtwoptions' function in all versions up to, and including, 1.11.25. This makes it possible for unauthenticated attackers to update plugin settings including...

CVE-2026-20654

creationtimestamp| type| source ---|---|--- 2026-02-12 02:47:13+00:00| seen| https://bsky.app/profile/speedyfriend67.bsky.social/post/3memy2pauyc2i 2026-02-12 02:47:56+00:00| seen| https://bsky.app/profile/speedyfriend67.bsky.social/post/3memy3zdwhc2i...

CVE-2026-20700

creationtimestamp| type| source ---|---|--- 2026-02-11 18:36:24+00:00| seen| https://bsky.app/profile/applsec.bsky.social/post/3mem4n4e4aq2x 2026-02-11 18:36:34+00:00| seen| https://infosec.exchange/users/applsec/statuses/116053441380483263 2026-02-11 20:40:51+00:00| seen|...

CVE-2026-0958

creationtimestamp| type| source ---|---|--- 2026-02-11 12:21:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3melhorpbvs2v 2026-02-11 13:55:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3melmweqeno2j...

CVE-2026-2295

The WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajaxpostgridloadmore' function in all versions up to, and including, 1.3.2. This makes it possible for unauthenticated attacker...

CVE-2026-2295 WPZOOM Addons for Elementor – Starter Templates & Widgets <= 1.3.2 - Unauthenticated Protected Post Exposure via ajax_post_grid_load_more

The WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajaxpostgridloadmore' function in all versions up to, and including, 1.3.2. This makes it possible for unauthenticated attacker...