CVE-2026-42874

creationtimestamp| type| source ---|---|--- 2026-05-11 21:40:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlmagih4q72e...

CVE-2026-8288

creationtimestamp| type| source ---|---|--- 2026-05-11 14:45:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllja3l5s32k...

CVE-2026-8231

creationtimestamp| type| source ---|---|--- 2026-05-10 08:17:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlid3h32jz2h...

CVE-2026-42302

creationtimestamp| type| source ---|---|--- 2026-05-08 23:25:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleuuesn3g2q 2026-05-09 00:59:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf24tccw72t 2026-05-09 04:30:30+00:00| seen|...

CVE-2026-41574

creationtimestamp| type| source ---|---|--- 2026-05-08 19:23:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlehe3i6pe2i...

CVE-2026-41584

creationtimestamp| type| source ---|---|--- 2026-05-08 18:50:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlefivlihl2r 2026-05-08 19:04:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlegbnfjvt26...

CVE-2026-43344

creationtimestamp| type| source ---|---|--- 2026-05-08 17:17:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleadq6tbe2i...

CVE-2026-43346

creationtimestamp| type| source ---|---|--- 2026-05-08 17:04:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mle7mpnjyz2p...

EUVD-2026-28543

The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sky-custom-scripts custom post type in all versions up to, and including, 3.3.2. This is due to the custom post type being registered with capabilitytype = 'post' and showinrest = true, combined with...

CVE-2026-7475

The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sky-custom-scripts custom post type in all versions up to, and including, 3.3.2. This is due to the custom post type being registered with capabilitytype = 'post' and showinrest = true, combined with...

CVE-2026-7475

The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sky-custom-scripts custom post type in all versions up to, and including, 3.3.2. This is due to the custom post type being registered with capabilitytype = 'post' and showinrest = true, combined with...

CVE-2026-7475 Sky Addons <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Script

The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sky-custom-scripts custom post type in all versions up to, and including, 3.3.2. This is due to the custom post type being registered with capabilitytype = 'post' and showinrest = true, combined with...

CVE-2026-7475 Sky Addons <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Script

The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sky-custom-scripts custom post type in all versions up to, and including, 3.3.2. This is due to the custom post type being registered with capabilitytype = 'post' and showinrest = true, combined with...

CVE-2026-7475

The Sky Addons (WordPress) plugin, specifically Sky Elementor Addons with Widgets & Templates versions

CVE-2025-0305

creationtimestamp| type| source ---|---|--- 2026-05-08 07:32:00+00:00| seen| https://bsky.app/profile/dusk-services.bsky.social/post/3mld7mb7uwa2u 2026-05-08 07:32:00+00:00| seen| https://bsky.app/profile/dusk-services.bsky.social/post/3mld7madfxm2a 2026-05-08 07:32:01+00:00| seen|...

PT-2026-38904

Name of the Vulnerable Software and Affected Versions Sky Addons versions prior to 3.3.3 Description The Sky Addons plugin for WordPress allows authenticated attackers with Author-level access or higher to inject arbitrary web scripts. This occurs because the sky-custom-scripts custom post type i...

WordPress plugin Sky Addons 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

CVE-2026-42826

creationtimestamp| type| source ---|---|--- 2026-05-07 23:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcczpg3qd2g 2026-05-07 23:45:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcfks2gmw2k 2026-05-08 03:00:28+00:00| seen|...

CVE-2026-42501

creationtimestamp| type| source ---|---|--- 2026-05-07 21:23:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5lyf2ry2c...

WordPress Sky Addons – Elementor Addons with Widgets & Templates plugin <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Sky Addons for Elementor versions = 3.3.2...