23064 matches found
CVE-2026-15267
creationtimestamp| type| source ---|---|--- 2026-07-28 12:11:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpezcbinh2i...
CVE-2026-10207
creationtimestamp| type| source ---|---|--- 2026-07-28 12:01:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpehfd6be23 2026-07-28 15:06:49+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrpos4bbbw2d...
CVE-2026-14516
creationtimestamp| type| source ---|---|--- 2026-07-28 11:33:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpcvdklcz23...
CVE-2026-13161
creationtimestamp| type| source ---|---|--- 2026-07-28 11:30:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrpcpxmcwm2j...
CVE-2026-59243
creationtimestamp| type| source ---|---|--- 2026-07-28 11:02:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpb5kx43v2d 2026-07-29 16:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrseoxjskc2i 2026-08-04 22:00:04+00:00| published-proof-of-concept|...
CVE-2026-10207
The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplied input via the 'id' GET parameter in the user profile template combined with the use of wpunslash which removes...
EUVD-2026-49734
The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplied input via the 'id' GET parameter in the user profile template combined with the use of wpunslash which removes...
CVE-2026-10207 PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter
The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplied input via the 'id' GET parameter in the user profile template combined with the use of wpunslash which removes...
CVE-2026-10207
The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplied input via the 'id' GET parameter in the user profile template combined with the use of wpunslash which removes...
CVE-2026-10207
The CVE-2026-10207 issue affects the WordPress plugin PickPlugins Question Answer (WordPress) up to version 1.2.73 . The vulnerability is an SQL Injection caused by insufficient sanitization of the user-supplied input via the 'id' GET parameter in the user profile template, combined with wp_unsla...
CVE-2026-17528
creationtimestamp| type| source ---|---|--- 2026-07-28 08:53:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrozxatyca23...
CVE-2026-14870
creationtimestamp| type| source ---|---|--- 2026-07-28 08:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrozocfqqs2i...
CVE-2026-15012
creationtimestamp| type| source ---|---|--- 2026-07-28 08:43:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrozfdydns2s...
CVE-2026-16811
creationtimestamp| type| source ---|---|--- 2026-07-28 08:38:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroz4fj7mn2x...
CVE-2026-14819
creationtimestamp| type| source ---|---|--- 2026-07-28 08:02:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrox3t5s5j2j...
CVE-2026-16587
The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
EUVD-2026-49695
The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
CVE-2026-16587 Advanced Form Integration <= 2.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary MailUp OAuth Token Overwrite via auth_redirect() Function
The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
CVE-2026-39874
creationtimestamp| type| source ---|---|--- 2026-07-28 01:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mro7jycbc32j 2026-07-28 01:24:00+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mroasrtyly2b 2026-07-28 04:47:11+00:00| seen|...