EUVD-2026-12537

The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.7.1049 via the getmainqueryargs function due to insufficient restrictions on which posts can be included. This makes it possib...

CVE-2026-2373 Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure

The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.7.1049 via the getmainqueryargs function due to insufficient restrictions on which posts can be included. This makes it possib...

CVE-2025-52468

creationtimestamp| type| source ---|---|--- 2026-03-02 16:29:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg3ogey6un2s 2026-03-02 17:57:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3tcy3iw524 2026-03-03 19:40:10+00:00| seen|...

CVE-2026-28364

creationtimestamp| type| source ---|---|--- 2026-02-27 04:24:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsuj76ohg2x 2026-02-27 04:25:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsuk4rdbu26 2026-02-27 05:35:23+00:00| seen|...

CVE-2019-25306

creationtimestamp| type| source ---|---|--- 2026-02-12 14:16:18+00:00| seen| https://bsky.app/profile/postacc.bsky.social/post/3meo6kxhekw2u 2026-02-12 14:23:34+00:00| seen| https://bsky.app/profile/postacc.bsky.social/post/3meo6xwvnkp2u 2026-02-12 14:32:29+00:00| seen|...

CVE-2025-58150

creationtimestamp| type| source ---|---|--- 2026-01-27 11:03:01+00:00| seen| https://seclists.org/oss-sec/2026/q1/117 2026-01-27 12:42:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdfru2qhmm2b 2026-01-27 13:41:11+00:00| seen|...

CVE-2025-68926

creationtimestamp| type| source ---|---|--- 2025-12-30 17:25:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb7umyfdfo2e 2025-12-30 17:43:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb7vm3m56s2c 2026-01-02 04:45:49+00:00| seen|...

CVE-2025-13339

creationtimestamp| type| source ---|---|--- 2025-12-10 07:10:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7miwp5sjw2y 2025-12-10 07:45:41+00:00| seen| https://gist.github.com/Darkcrai86/54a35bd8d99ef7098f2e2b7b8465278c 2025-12-10 08:07:48+00:00| seen|...

CVE-2025-13771

creationtimestamp| type| source ---|---|--- 2025-11-28 10:03:00+00:00| seen| https://infosec.exchange/users/offseq/statuses/115626749410261118 2025-11-28 10:03:02+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m6omy3254v26 2025-11-28 11:04:14+00:00| seen|...

CVE-2025-12856

creationtimestamp| type| source ---|---|--- 2025-11-07 15:15:33+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52engqw7dv2 2025-11-07 15:57:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m52gysn63k2n...

CVE-2025-53072

creationtimestamp| type| source ---|---|--- 2025-10-22 04:33:55+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3qzdj5an22i 2025-10-22 07:21:45+00:00| seen| https://poliverso.org/objects/0477a01e-736b48f2-6409a361f7d72e52 2025-10-22 07:25:50+00:00| seen|...

CVE-2022-36903

creationtimestamp| type| source ---|---|--- 2025-10-19 15:39:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m3kb2yynzmw2 2025-10-19 16:20:18+00:00| seen| https://bsky.app/profile/potato.software/post/3m3kpfudtee2s...

CVE-2025-62176

Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...

Mastodon 安全漏洞

Mastodon is an open source social networking server based on ActivityPub by Mastodon Open Source. A security vulnerability exists in Mastodon versions prior to 4.4.6, prior to 4.3.14, and prior to 4.2.27, which stems from an event where the stream server accepts service for a public timeline usin...

CVE-2025-59340

creationtimestamp| type| source ---|---|--- 2025-09-18 04:32:10+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lz3jf3gfbn2w 2025-09-19 07:32:32+00:00| seen| https://bsky.app/profile/crowdcyber.bsky.social/post/3lz6dwkaulg2c 2025-09-19 13:13:41+00:00| seen|...

CVE-2025-10155

creationtimestamp| type| source ---|---|--- 2025-09-10 19:51:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jgw4-cr84-mqxg 2025-09-17 10:31:59+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyzmzk6thf2o 2025-09-17 11:32:14+00:00| seen|...

CVE-2025-8388

creationtimestamp| type| source ---|---|--- 2025-09-10 05:00:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyhhbbhzhb2r 2025-09-10 05:01:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyhhc73eyw2y...

CVE-2025-9300

creationtimestamp| type| source ---|---|--- 2025-09-04 09:58:57+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lxyv4h6xe22g 2025-09-04 10:14:36+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lxyvyg6zrk2g 2025-09-05 22:01:48+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2020-25286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or...

Linux Distros Unpatched Vulnerability : CVE-2023-5561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of use...