CVE-2026-78003

creationtimestamp| type| source ---|---|--- 2026-08-22 09:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117138340214723722 2026-08-22 09:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtnvxy3zpx2c 2026-08-22 09:03:42+00:00| seen|...

CVE-2026-77000

The WP Social Media Login WordPress plugin (through 1.0.6 ) fails to verify that a social login was actually completed with the identity provider before authenticating a visitor. This allows unauthenticated attackers to log in as any existing user, including administrators , simply by supplying t...

EUVD-2026-64225

The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's ema...

2 Click Socialmedia Buttons < 0.34 - Cross-Site Scripting

A cross-site scripting vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter. id: CVE-2012-4273 info: name: 2 Click Socialmedia Buttons 0.34 - Cross-Site Scripti...

CVE-2026-76904

creationtimestamp| type| source ---|---|--- 2026-08-21 22:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmr46uv4d2o 2026-08-21 22:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtmrja7q442p 2026-08-21 23:20:04+00:00| seen|...

CVE-2026-77087

creationtimestamp| type| source ---|---|--- 2026-08-21 16:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtm4yhm7ea26 2026-08-21 16:09:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtm5ij7ehq2e 2026-08-21 16:23:35+00:00| seen|...

CVE-2026-18290

creationtimestamp| type| source ---|---|--- 2026-08-21 12:07:43+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtlpxwzwki2i 2026-08-21 12:07:50+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117133414439759245...

CVE-2026-77776

creationtimestamp| type| source ---|---|--- 2026-08-21 12:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/117133386151660614 2026-08-21 12:00:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtlpl4zilt2n 2026-08-21 12:13:30+00:00| seen|...

CVE-2026-77683

creationtimestamp| type| source ---|---|--- 2026-08-21 10:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtlkk3vbum2n 2026-08-21 10:30:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/117133032027242771...

CVE-2026-72818

creationtimestamp| type| source ---|---|--- 2026-08-20 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkdyg4ok727 2026-08-21 00:31:12+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtkj2hszzn25...

CVE-2026-66592

creationtimestamp| type| source ---|---|--- 2026-08-20 13:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjdkgqbuq2c 2026-08-20 14:07:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjg7o3igv2m...

CVE-2026-70906

creationtimestamp| type| source ---|---|--- 2026-08-19 13:35:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwox6lk2o 2026-08-19 17:52:27+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-19 21:03:36+00:00| seen|...

CVE-2026-60883

creationtimestamp| type| source ---|---|--- 2026-08-19 13:35:05+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h 2026-08-19 17:52:19+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60879

creationtimestamp| type| source ---|---|--- 2026-08-19 13:35:05+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h 2026-08-19 17:52:21+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60975

creationtimestamp| type| source ---|---|--- 2026-08-19 13:35:05+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h 2026-08-19 17:47:50+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-32444

creationtimestamp| type| source ---|---|--- 2026-08-18 15:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtekysxdfw25 2026-08-18 16:08:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtelz3yfma25...

CVE-2026-72200

creationtimestamp| type| source ---|---|--- 2026-08-17 08:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbciwsrdz2e 2026-08-20 08:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtiro6xbee2y...

CVE-2026-13712

The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role as low as contributor to store JavaScript which will run when a higher privileged user, such as an administrator,...

CVE-2026-13712

The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role as low as contributor to store JavaScript which will run when a higher privileged user, such as an administrator,...

CVE-2026-13712 Divi 5.0 - 5.8.1 - Contributor+ Stored XSS via Social Media Follow Skype URL

The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role as low as contributor to store JavaScript which will run when a higher privileged user, such as an administrator,...