6111 matches found
CVE-2019-25628
creationtimestamp| type| source ---|---|--- 2026-03-24 13:05:27+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhsnb3ljx72y 2026-03-24 13:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhspptsrc42p...
Remote Code Execution (RCE)
tinacms is vulnerable to remote code execution. The vulnerability is due to improper handling of markdown content using the gray-matter package, which allows an attacker to execute arbitrary code by injecting malicious content into processed markdown files such as blog posts...
CVE-2026-4755
creationtimestamp| type| source ---|---|--- 2026-03-24 07:16:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrzrjfvsk27 2026-03-24 07:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116282977621312105 2026-03-24 07:30:30+00:00| seen|...
CVE-2026-4753
creationtimestamp| type| source ---|---|--- 2026-03-24 06:23:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrwsrriex2c 2026-03-24 07:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhs2osrnei2n...
EUVD-2026-14618
The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relationalpostssearch function in all versions up to, and including, 5.0.6. This makes it possible for authenticated attackers, with Contributor-level access and abov...
CVE-2026-4021
creationtimestamp| type| source ---|---|--- 2026-03-24 00:09:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrbw2jt5724 2026-03-24 00:19:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrchlqftr2e...
CVE-2026-3533
creationtimestamp| type| source ---|---|--- 2026-03-24 00:05:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrbo36xep2p 2026-03-24 00:23:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrcp2nvyn2s...
Unspecified vulnerability in Discourse (CNVD-2026-17481)
Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from a security vulnerability due to an overly broad authorization check on the deleted post index endpoint, which can ...
Discourse Information Disclosure Vulnerability (CNVD-2026-17477)
Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from an information disclosure vulnerability that stems from the /private-posts endpoint not applying post type...
CVE-2026-4066
The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relationalpostssearch function in all versions up to, and including, 5.0.6. This makes it possible for authenticated attackers, with Contributor-level access and abov...
CVE-2025-60947
creationtimestamp| type| source ---|---|--- 2026-03-23 22:44:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr55hi7rl27 2026-03-23 23:19:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr73jy6su2i 2026-03-24 01:32:09+00:00| seen|...
CVE-2026-32300
creationtimestamp| type| source ---|---|--- 2026-03-23 22:43:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr53h7zwd27 2026-03-23 23:04:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr6bxm56l2g 2026-03-24 23:00:14+00:00| seen|...
CVE-2026-32277
creationtimestamp| type| source ---|---|--- 2026-03-23 22:30:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4fda2qx24 2026-03-23 22:31:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4g4gzxc2q 2026-03-23 22:36:07+00:00| seen|...
CVE-2026-32276
creationtimestamp| type| source ---|---|--- 2026-03-23 22:30:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4f4hwqo2c 2026-03-23 22:31:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4fviqoh2f 2026-03-23 23:34:10+00:00| seen|...
CVE-2026-32913
creationtimestamp| type| source ---|---|--- 2026-03-23 22:29:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4cjbbof2e 2026-03-23 23:14:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr6slkvs22p 2026-03-24 12:00:04+00:00| published-proof-of-concept|...
CVE-2026-4066 Smart Custom Fields <= 5.0.6 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search
The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relationalpostssearch function in all versions up to, and including, 5.0.6. This makes it possible for authenticated attackers, with Contributor-level access and abov...
CVE-2026-4066 Smart Custom Fields <= 5.0.6 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search
The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relationalpostssearch function in all versions up to, and including, 5.0.6. This makes it possible for authenticated attackers, with Contributor-level access and abov...
CVE-2026-4066
The CVE concerns the Smart Custom Fields plugin for WordPress (affected: all versions up to and including 5.0.6). A missing capability check in relational_posts_search() allows authenticated users with Contributor-level access or higher to read private and draft posts from other authors via the s...
CVE-2026-4066
The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relationalpostssearch function in all versions up to, and including, 5.0.6. This makes it possible for authenticated attackers, with Contributor-level access and abov...
WordPress WP Posts Re-order plugin <= 1.0 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin WP Posts Re-order versions = 1.0...