CVE-2026-54909

creationtimestamp| type| source ---|---|--- 2026-08-01 00:12:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7tqoc6v5cvlvv 2026-08-01 04:31:50+00:00| seen| https://gist.github.com/alon710/402cd5e451c20f1dfc47c5b8f0cf1ddb...

PT-2026-67015

The wpForo Forum WordPress plugin before 3.1.2 does not sanitize and escape a user profile field before outputting it inside an HTML attribute on the public participant profile page, allowing users with a subscriber-level account to inject JavaScript that executes in the browser of any visitor wh...

CVE-2026-57319

creationtimestamp| type| source ---|---|--- 2026-07-31 23:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mry53uenmt27...

CVE-2026-54768 WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design)

WPGraphQL provides a GraphQL API for WordPress sites. From 2.0.0 until 2.15.1, the deprecated user field on SendPasswordResetEmailPayload lets an unauthenticated caller distinguish existing author-class accounts through the sendPasswordResetEmail mutation and obtain public profile fields. This...

CVE-2026-54768 WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design)

WPGraphQL provides a GraphQL API for WordPress sites. From 2.0.0 until 2.15.1, the deprecated user field on SendPasswordResetEmailPayload lets an unauthenticated caller distinguish existing author-class accounts through the sendPasswordResetEmail mutation and obtain public profile fields. This...

EUVD-2026-51676

WPGraphQL provides a GraphQL API for WordPress sites. From 2.0.0 until 2.15.1, the deprecated user field on SendPasswordResetEmailPayload lets an unauthenticated caller distinguish existing author-class accounts through the sendPasswordResetEmail mutation and obtain public profile fields. This...

CVE-2026-54768

WPGraphQL

CVE-2026-15971

creationtimestamp| type| source ---|---|--- 2026-07-31 20:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxr55g6ps2u 2026-08-01 20:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2beuzq2c2z...

CVE-2026-52856

creationtimestamp| type| source ---|---|--- 2026-07-31 19:51:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrxq3akldl23 2026-08-02 07:02:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms3fwwqe6w2e...

CVE-2026-56054

creationtimestamp| type| source ---|---|--- 2026-07-31 19:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrxpopxkbu2t...

CVE-2026-35847

creationtimestamp| type| source ---|---|--- 2026-07-31 19:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxnh4gb4m2a...

CVE-2025-69930

creationtimestamp| type| source ---|---|--- 2026-07-31 18:58:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxn4gmlbu2s...

CVE-2025-65336

creationtimestamp| type| source ---|---|--- 2026-07-31 18:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxn4f3i2d23...

CVE-2026-18446

creationtimestamp| type| source ---|---|--- 2026-07-31 16:58:30+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrxggkrye42v 2026-08-02 09:00:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms3mmrwppv2n...

CVE-2025-69937

creationtimestamp| type| source ---|---|--- 2026-07-31 16:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxgcad7e52v...

CVE-2025-69938

creationtimestamp| type| source ---|---|--- 2026-07-31 15:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxcmapwft2y...

CVE-2025-69941

creationtimestamp| type| source ---|---|--- 2026-07-31 15:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxcf26mcq2q...

CVE-2026-27060

creationtimestamp| type| source ---|---|--- 2026-07-31 15:44:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrxcbkstiw2u 2026-07-31 17:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrxiy5imiu2q...

CVE-2026-9611

creationtimestamp| type| source ---|---|--- 2026-07-31 14:14:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5xje7j3v4ojvq...

CVE-2026-18358

creationtimestamp| type| source ---|---|--- 2026-07-31 14:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrx4j26lsv2f 2026-08-01 12:08:40+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrzgpafqsv2j...