CVE-2026-10879

creationtimestamp| type| source ---|---|--- 2026-06-06 03:21:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnlp5txd5b2y...

CVE-2026-8608

creationtimestamp| type| source ---|---|--- 2026-06-06 01:28:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlitozqat2s...

CVE-2026-7047

creationtimestamp| type| source ---|---|--- 2026-06-06 01:18:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlibrygem2y...

CVE-2026-6240

creationtimestamp| type| source ---|---|--- 2026-06-06 01:03:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlhgwbmmg2d...

CVE-2026-6239

creationtimestamp| type| source ---|---|--- 2026-06-06 00:52:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlgskpkir2q...

CVE-2026-6448

creationtimestamp| type| source ---|---|--- 2026-06-06 00:49:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlgn6nqvl2e...

CVE-2026-7523

creationtimestamp| type| source ---|---|--- 2026-06-06 00:41:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlg7oeqp22i...

EUVD-2026-34928

The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.17 via the profile template scope function. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files...

CVE-2026-9290

The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.17 via the profile template scope function. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files...

CVE-2026-10038

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insecure Direct Object Reference / Authorization Bypass leading to Arbitrary Attachment Deletion in versions up to, and including, 1.8.11.1 via the profile avatar...

CVE-2026-7654

creationtimestamp| type| source ---|---|--- 2026-06-05 23:59:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlduknsmz2g 2026-06-06 00:00:18+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mnldvanx2n2s 2026-06-06 00:55:49+00:00| seen|...

CVE-2026-9290

The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.17 via the profile template scope function. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files...

CVE-2026-11429

creationtimestamp| type| source ---|---|--- 2026-06-05 23:25:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlbxhyq522a 2026-06-06 00:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnldvvpv6p2k 2026-06-06 00:00:41+00:00| seen|...

GHSA-2G2G-8P8H-FGWM Twig: XSS in profiler HtmlDumper via unescaped template and profile names

Description Twig\Profiler\Dumper\HtmlDumper writes Profile::getTemplate and Profile::getName straight into its HTML output without escaping: php protected function formatTemplateProfile $profile, $prefix: string return \sprintf'%s└ %s', $prefix, self::$colors'template', $profile-getTemplate; The...

Twig: XSS in profiler HtmlDumper via unescaped template and profile names

Description Twig\Profiler\Dumper\HtmlDumper writes Profile::getTemplate and Profile::getName straight into its HTML output without escaping: php protected function formatTemplateProfile $profile, $prefix: string return \sprintf'%s└ %s', $prefix, self::$colors'template', $profile-getTemplate; The...

CVE-2026-46397

creationtimestamp| type| source ---|---|--- 2026-06-05 21:40:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnl42opps527...

CVE-2026-46398

creationtimestamp| type| source ---|---|--- 2026-06-05 21:35:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnl3rq4wz32z...

CVE-2026-46400

creationtimestamp| type| source ---|---|--- 2026-06-05 21:30:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnl3iqrl6u2f...

CVE-2026-45777

creationtimestamp| type| source ---|---|--- 2026-06-05 20:57:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkzp3hx2y2k...

CVE-2026-45778

creationtimestamp| type| source ---|---|--- 2026-06-05 20:55:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkzklr64m2g...