CVE-2026-69110

creationtimestamp| type| source ---|---|--- 2026-08-04 16:46:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hx2djdxo2nr7y 2026-08-04 17:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbige4sax2t 2026-08-04 18:12:05+00:00| seen|...

CVE-2026-67247

creationtimestamp| type| source ---|---|--- 2026-08-04 14:27:48+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msb7ureywf25 2026-08-04 14:59:23+00:00| seen| https://bsky.app/profile/potato.software/post/3msbbnaqvro2i...

WordPress WOLF plugin < 1.1.0 - WordPress Posts Bulk Editor and Manager < 1.1.0 - Stored XSS vulnerability

WordPress WOLF plugin 1.1.0 - WordPress Posts Bulk Editor and Manager 1.1.0 - Stored XSS vulnerability discovered by she11f in WordPress Plugin WOLF versions 1.1.0...

CVE-2026-15721

creationtimestamp| type| source ---|---|--- 2026-08-04 10:12:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cjbyppr37r6vy 2026-08-04 13:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msb2z7pf2r2e 2026-08-04 13:34:04+00:00| seen|...

CVE-2026-18685

creationtimestamp| type| source ---|---|--- 2026-08-03 23:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7p5zk45z2f 2026-08-04 00:00:37+00:00| seen| https://infosec.exchange/users/offseq/statuses/117034296046822265 2026-08-04 00:00:39+00:00| seen|...

CVE-2026-67598

creationtimestamp| type| source ---|---|--- 2026-08-03 20:55:02+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7f2blmgt2q 2026-08-03 21:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7fgvrgmd2i 2026-08-07 10:04:24+00:00|...

CVE-2026-69153

creationtimestamp| type| source ---|---|--- 2026-08-03 18:28:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gp5oyt6frvyqh 2026-08-03 18:31:17+00:00| seen| https://gist.github.com/alon710/cea21195fa5b2fd7a130b5ccd15ff053 2026-08-03 18:35:03+00:00| published-proof-of-concept|...

CVE-2026-69091

Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to validate the login-only configuration state, allowing unauthenticated attackers to read forum topics and posts by...

CVE-2026-69091 Admidio before 5.0.11 Authentication Bypass via forum.php

Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to validate the login-only configuration state, allowing unauthenticated attackers to read forum topics and posts by...

CVE-2026-69091

Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to validate the login-only configuration state, allowing unauthenticated attackers to read forum topics and posts by...

EUVD-2026-52284

Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to validate the login-only configuration state, allowing unauthenticated attackers to read forum topics and posts by...

CVE-2026-18577

creationtimestamp| type| source ---|---|--- 2026-08-03 10:00:37+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0275 2026-08-03 10:00:37+00:00| seen| https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html 2026-08-03 12:21:24+00:00| seen|...

CVE-2026-15231

The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to access a referenced post before processing it and returning derived data, allowing users with contributor privileges to disclose data from private or draft posts they do not own...

CVE-2026-15231 TaxoPress < 3.51.0 - Contributor+ Private Post Disclosure via IDOR

The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to access a referenced post before processing it and returning derived data, allowing users with contributor privileges to disclose data from private or draft posts they do not own...

EUVD-2026-52172

The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to access a referenced post before processing it and returning derived data, allowing users with contributor privileges to disclose data from private or draft posts they do not own...

CVE-2026-15231 TaxoPress < 3.51.0 - Contributor+ Private Post Disclosure via IDOR

The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to access a referenced post before processing it and returning derived data, allowing users with contributor privileges to disclose data from private or draft posts they do not own...

CVE-2026-15231

The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to access a referenced post before processing it and returning derived data, allowing users with contributor privileges to disclose data from private or draft posts they do not own...

CVE-2026-16057 Contest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library

The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gating it only by a coarse role-membership test, which allows any Author-level or higher user to permanently delete arbitrary posts, pages, and other...

CVE-2026-16274 Classified Listing < 5.4.4 - Contributor+ Unpublished Post Content Disclosure via rtcl_block_css_get_posts

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability or ownership check on an AJAX action that returns a post's content, allowing users with contributor-level access and above to read the content of any post, page, or custom post type on the site — including drafts,...

CVE-2026-16274

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability or ownership check on an AJAX action that returns a post's content, allowing users with contributor-level access and above to read the content of any post, page, or custom post type on the site — including drafts,...