CVE-2026-38968

creationtimestamp| type| source ---|---|--- 2026-07-03 17:23:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2qksm6k2f...

CGA-HV3G-4GQH-C5FC

Bulletin has no description...

MINI-QMMQ-C694-CFV2

Bulletin has no description...

MINI-RFJV-H29V-68J7

Bulletin has no description...

MINI-MV4M-GHV8-W595

Bulletin has no description...

MINI-WMRW-RC7C-9W95

Bulletin has no description...

MINI-PX24-7PV3-9X85

Bulletin has no description...

MINI-M8VR-G2WJ-JX46

Bulletin has no description...

MINI-P289-V2FF-7WP9

Bulletin has no description...

MINI-5RGH-V8C3-PRJ2

Bulletin has no description...

MINI-924M-863H-MG3H

Bulletin has no description...

MINI-89RX-Q53R-5MGH

Bulletin has no description...

MINI-P862-RQ23-C5M6

Bulletin has no description...

CVE-2026-11900

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 2.8.16 via the 'data' attribute of the adinserter shortcode. This is due to the replaceaitags function processing a reusable-block-N tag pattern that...

MINI-GMCR-WJ53-2M95

Bulletin has no description...

CVE-2026-11900

The CVE-2026-11900 entry concerns the WordPress plugin Ad Inserter – Ad Manager & AdSense Ads up to version 2.8.16. It is vulnerable to an Insecure Direct Object Reference via the shortcodes’ data attribute. The replace_ai_tags() function processes a {reusable-block-N} pattern by calling get_post...

CVE-2026-11900

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 2.8.16 via the 'data' attribute of the adinserter shortcode. This is due to the replaceaitags function processing a reusable-block-N tag pattern that...

CVE-2026-8921

creationtimestamp| type| source ---|---|--- 2026-07-03 06:42:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppwxkbkw72u 2026-07-03 19:36:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprc7nvnqc2n...

BELL-CVE-2026-53357

Bulletin has no description...

CVE-2026-9180

MotoPress Appointment Booking for WordPress (versions up to 2.4.4) is vulnerable to an Authorization Bypass via a user-controlled booking_id. The REST endpoint POST /motopress/appointment/v1/bookings is registered with a permissive permission_callback (return_true ), and createBooking() loads the...