CVE-2025-8678

creationtimestamp| type| source ---|---|--- 2025-08-22 12:33:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwyhpeoga22l...

CVE-2025-8678

The WP Crontrol plugin for WordPress is vulnerable to blind Server-Side Request Forgery in versions 1.17.0 to 1.19.1 via the 'wpremoterequest' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations...

WordPress WP Crontrol plugin 1.17.0-1.19.1 - Authenticated (Administrator+) Server-Side Request Forgery vulnerability

Authenticated Administrator+ Server-Side Request Forgery vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Crontrol versions 1.17.0-1.19.1...

MAL-2025-8678 Malicious code in @malware-test-golpe-lande-metif-mania/test-mlw3-golpe-lande-metif-mania (npm)

The package @malware-test-golpe-lande-metif-mania/test-mlw3-golpe-lande-metif-mania was found to contain malicious code...