CVE-2026-48499

creationtimestamp| type| source ---|---|--- 2026-07-30 20:23:53+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrvbgw5k5s2c 2026-07-30 20:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvdahgdbl23...

CVE-2026-67594

creationtimestamp| type| source ---|---|--- 2026-07-30 20:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrva7x7eag22 2026-07-30 21:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdib25zu2j...

CVE-2026-66415

creationtimestamp| type| source ---|---|--- 2026-07-30 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrva57i7jh2o 2026-07-30 20:22:29+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrvbe4xv6v2d...

CVE-2026-12940

creationtimestamp| type| source ---|---|--- 2026-07-30 17:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruz2zcjdt2z 2026-07-30 18:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mruzhq4nk622 2026-07-30 18:50:13+00:00| seen|...

CVE-2026-58066

creationtimestamp| type| source ---|---|--- 2026-07-30 07:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtujmg3ak2a 2026-07-30 07:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtukzihe22w 2026-07-30 07:10:21+00:00| seen|...

CVE-2026-58046

creationtimestamp| type| source ---|---|--- 2026-07-30 07:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtujl5bc42j 2026-07-30 07:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtukscvpt22 2026-07-30 07:08:22+00:00| seen|...

CVE-2026-14305

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...

CVE-2026-14305 WP Delicious < 1.10.2 - Unauthenticated Arbitrary Post Meta Update via recipe_likes

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...

EUVD-2026-51015

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...

CVE-2026-14305

The WP Delicious WordPress plugin (versions before 1.10.2 ) is vulnerable because it fails to perform an authorization check on one of its AJAX actions . This allows unauthenticated users to modify limited post metadata, such as a like counter and an associated identifier list , on arbitrary post...

CVE-2026-14231 LifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_posts

The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing any authenticated user with subscriber-level access to read the titles of internal post types such as coupon codes by...

CVE-2026-14231 LifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_posts

The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing any authenticated user with subscriber-level access to read the titles of internal post types such as coupon codes by...

CVE-2026-15975

creationtimestamp| type| source ---|---|--- 2026-07-30 04:45:25+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 05:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtnuxzugp2q 2026-07-30 14:15:31+00:00| seen|...

CVE-2026-14923: Incorrect Authorization

The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page-editing capability on a REST route that creates and updates posts, because of an operator-precedence flaw in its authorization check. An authenticated user holding only the post-editing capability such...

CVE-2026-67432

creationtimestamp| type| source ---|---|--- 2026-07-29 20:57:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsstprxqw2i 2026-07-29 21:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrsszcbcnl22 2026-07-30 16:35:23+00:00| published-proof-of-concept|...

CVE-2026-8338

creationtimestamp| type| source ---|---|--- 2026-07-29 17:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsibe4vxy2v 2026-07-29 18:05:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsjarkuic27...

CVE-2026-65890

creationtimestamp| type| source ---|---|--- 2026-07-29 14:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrs5giyvju2e 2026-07-29 14:59:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs6ukdypn2q 2026-08-06 08:37:07+00:00| seen|...

CVE-2026-9177

creationtimestamp| type| source ---|---|--- 2026-07-29 14:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrs5cvb4ox2y 2026-07-29 15:03:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs73bdmgs2i...

CVE-2021-29490

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/3927 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/4060 2026-07-29 12:00:58+00:00| seen| https://t.me/CVEhub/3440 2026-07-29 12:01:01+00:00| seen| https://t.me/CVEhub/2139 2026-07-29...

CVE-2026-47876

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrruttu6fz24 2026-07-29 12:13:55+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrrvltod7t2w 2026-07-29 12:13:58+00:00| seen|...