CVE-2026-42180

Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy allows an authenticated low-privileged user to create a link post through POST /api/v3/post. When a post is created in a public community, the backend asynchronously sends a Webmention to the attacker-controll...

CVE-2026-42180 Lemmy: SSRF in /api/v3/post via Webmention dispatch

Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy allows an authenticated low-privileged user to create a link post through POST /api/v3/post. When a post is created in a public community, the backend asynchronously sends a Webmention to the attacker-controll...

CVE-2026-41583

creationtimestamp| type| source ---|---|--- 2026-05-08 18:30:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleef5vlvz2h 2026-05-08 19:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleg3c5no72q...

CERTFR-2026-ACT-020

creationtimestamp| type| source ---|---|--- 2026-05-04 15:41:45+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mkzz4cqpnu2p 2026-05-04 15:42:42+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mkzz5za2nx23 2026-05-04 15:42:46+00:00| seen|...

Ajax Load More < 7.6.1 - Unauthenticated Sensitive Information Exposure

The Ajax Load More – Infinite Scroll plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.6.0.2. The plugin's AJAX endpoint wpajaxnoprivalmgetposts allows unauthenticated users to access non-public posts draft, private, pending, future, tras...

CVE-2026-31368

creationtimestamp| type| source ---|---|--- 2026-04-21 07:26:48+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjyhfby5pv23 2026-04-21 07:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjyhlzy3vh2c 2026-04-21 09:15:10+00:00| seen|...

CVE-2026-5496

creationtimestamp| type| source ---|---|--- 2026-04-11 02:18:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6rj6qhsw2m 2026-04-11 03:21:49+00:00| seen| Telegram/-uyrs94fGKBZTNu2mzMK-L-9Rc5lrbCygfSEFHI7W39U14 2026-04-11 05:03:54+00:00| seen|...

CVE-2026-40287

creationtimestamp| type| source ---|---|--- 2026-04-10 12:20:06+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-g985-wjh9-qxxc 2026-04-14 05:17:42+00:00| seen| Telegram/EXit4BCARRaTXD4SBLqO-yd3UPNB5jBijYowsPR2aTE5HY 2026-04-14 05:20:27+00:00|...

CVE-2026-5554

creationtimestamp| type| source ---|---|--- 2026-04-05 11:15:53+00:00| published-proof-of-concept| Telegram/8Kty84VYI9Md0M9SNY3xGd7cM29Jpy2z-fm4LFUn2UMmE 2026-04-05 12:14:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqpyw73fj2n 2026-04-05 12:41:28+00:00| seen|...

PT-2026-29473

The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS including private posts in a predictable pattern using a random 6-digit number. These files are stored in the publicly accessible wp-content/uploads/ directory. As a result, any unauthenticated user can...

CVE-2026-21632

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0384/ 2026-04-01 12:03:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mignjhtn7k2z 2026-04-01 12:20:17+00:00| seen|...

CVE-2026-5286

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 06:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116327922216539438 2026-04-01 06:00:29+00:00| seen|...

EUVD-2026-12537

The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.7.1049 via the getmainqueryargs function due to insufficient restrictions on which posts can be included. This makes it possib...

CVE-2026-2373 Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure

The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.7.1049 via the getmainqueryargs function due to insufficient restrictions on which posts can be included. This makes it possib...

CVE-2025-52468

creationtimestamp| type| source ---|---|--- 2026-03-02 16:29:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg3ogey6un2s 2026-03-02 17:57:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3tcy3iw524 2026-03-03 19:40:10+00:00| seen|...

CVE-2026-28364

creationtimestamp| type| source ---|---|--- 2026-02-27 04:24:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsuj76ohg2x 2026-02-27 04:25:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsuk4rdbu26 2026-02-27 05:35:23+00:00| seen|...

CVE-2019-25306

creationtimestamp| type| source ---|---|--- 2026-02-12 14:16:18+00:00| seen| https://bsky.app/profile/postacc.bsky.social/post/3meo6kxhekw2u 2026-02-12 14:23:34+00:00| seen| https://bsky.app/profile/postacc.bsky.social/post/3meo6xwvnkp2u 2026-02-12 14:32:29+00:00| seen|...

CVE-2025-58150

creationtimestamp| type| source ---|---|--- 2026-01-27 11:03:01+00:00| seen| https://seclists.org/oss-sec/2026/q1/117 2026-01-27 12:42:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdfru2qhmm2b 2026-01-27 13:41:11+00:00| seen|...

CVE-2025-68926

creationtimestamp| type| source ---|---|--- 2025-12-30 17:25:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb7umyfdfo2e 2025-12-30 17:43:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb7vm3m56s2c 2026-01-02 04:45:49+00:00| seen|...

CVE-2025-13339

creationtimestamp| type| source ---|---|--- 2025-12-10 07:10:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7miwp5sjw2y 2025-12-10 07:45:41+00:00| seen| https://gist.github.com/Darkcrai86/54a35bd8d99ef7098f2e2b7b8465278c 2025-12-10 08:07:48+00:00| seen|...