CVE-2026-14315

creationtimestamp| type| source ---|---|--- 2026-08-01 14:34:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzotoz37a2z 2026-08-01 14:34:35+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzou5dfd322 2026-08-01 14:34:36+00:00| seen|...

CVE-2026-15964

creationtimestamp| type| source ---|---|--- 2026-08-01 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrzb7mhn4f2c 2026-08-01 11:00:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzcugznah2n 2026-08-01 18:35:23+00:00| seen|...

EUVD-2026-51762

The Advanced Views – Display Custom Fields ACF, Pods, MetaBox, Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the registerrestroutes. This makes it...

CVE-2026-14839

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14195

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...

CVE-2026-3141

creationtimestamp| type| source ---|---|--- 2026-08-01 06:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrys4r3tmi2j 2026-08-01 06:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrytvecl5v2m 2026-08-01 08:33:11+00:00| seen|...

CVE-2026-14839 Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

WordPress Mapster WP Maps plugin < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure vulnerability

Unauthenticated Private and Draft Post Content Disclosure vulnerability discovered by Alexander Jurkschat in WordPress Plugin Mapster WP Maps versions 1.24.0...

CVE-2026-14839

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14839 Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14839

The Mapster WP Maps WordPress plugin (versions before 1.24.0 ) contains a vulnerability where it fails to perform authorization or post-status checks on a public REST endpoint. This allows unauthenticated users to retrieve the title and full content of any post, including those with statuses such...

EUVD-2026-51711

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

CVE-2026-14195 Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...

CVE-2026-14195

The Brizy WordPress plugin, in versions prior to 2.8.18 , contains an authorization bypass vulnerability. The flaw exists in a request handler that fails to properly verify permissions before returning post content. This allows users with a Contributor role or higher to access and read arbitrary ...

EUVD-2026-51704

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...

PT-2026-67051

The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...

PT-2026-67037

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...

CVE-2026-14195: Authorization Bypass Through User-Controlled Key

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...

CVE-2026-58048

creationtimestamp| type| source ---|---|--- 2026-07-31 17:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxjnjuke42b 2026-07-31 18:00:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jdwwbzeerzdry 2026-08-01 09:22:36+00:00| seen|...

CVE-2026-66360

creationtimestamp| type| source ---|---|--- 2026-07-31 01:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvqvmxm6n2e 2026-07-31 02:06:00+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrvuknfmqh23...