10969 matches found
WordPress plugin WP Activity Log: Cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-0924: Improper Neutralization of Input During Web Page Generation
The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 5.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
PT-2025-6813 · WordPress · Wp Activity Log
Name of the Vulnerable Software and Affected Versions: WP Activity Log plugin for WordPress versions up to, and including, 5.2.2 Description: The issue is related to Stored Cross-Site Scripting via the message parameter due to insufficient input sanitization and output escaping. This allows...
WordPress WP Activity Log plugin <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered by zer0gh0st in WordPress Plugin WP Activity Log versions = 5.2.2...
CVE-2023-27012
creationtimestamp| type| source ---|---|--- 2025-02-14 10:05:58+00:00| seen| Telegram/YPd9jOc1W5QBJWC4avKUZMxMcGEJ1YmZAhAcRLo5OO4fhXc...
WordPress plugin HurryTimer has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
mySCADA myPRO Manager
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary OS commands, upload files, and obtain sensitive information without providing associated credentials. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize...
CVE-2024-36291
creationtimestamp| type| source ---|---|--- 2025-02-12 22:17:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7bipeyl2z 2025-02-12 23:28:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113993508057368728 2025-08-26 13:26:33+00:00| seen|...
WordPress WordPress Activity-o-meter plugin <= 1 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin WordPress Activity-o-meter versions = 1...
CVE-2024-13456
creationtimestamp| type| source ---|---|--- 2025-02-12 09:43:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113990264091516755 2025-02-12 10:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwx2xoo72x 2025-02-12 11:11:17+00:00| seen|...
CVE-2024-57000
creationtimestamp| type| source ---|---|--- 2025-02-11 22:40:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113987656907693602 2025-02-11 23:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2urr2u2a 2025-02-12 01:08:19+00:00|...
CVE-2024-21925
creationtimestamp| type| source ---|---|--- 2025-02-11 21:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwleill6j2z 2025-02-11 22:48:23+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113987689001851844 2025-02-11 23:04:34+00:00| seen|...
CVE-2024-52968
creationtimestamp| type| source ---|---|--- 2025-02-11 17:06:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113986344744783139 2025-02-11 17:16:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5ynuuvt2x 2025-02-11 17:45:28+00:00| seen|...
PT-2025-9132 · Howen · Howen Vehicle Service System
Name of the Vulnerable Software and Affected Versions: Howen Vehicle Service System affected versions not specified Description: The issue is related to a directory traversal possibility. Exploitation of this issue could allow a remote attacker to perform network activity without user interaction...
CVE-2025-1115
creationtimestamp| type| source ---|---|--- 2025-02-08 10:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhnv2rhrd327 2025-02-08 12:04:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3871 2025-02-08 13:03:30+00:00|...
CVE-2025-24982
Cross-site request forgery vulnerability exists in Activity Log WinterLock versions prior to 1.2.5. If a user views a malicious page while logged in, the log data may be deleted...
CVE-2025-1086
creationtimestamp| type| source ---|---|--- 2025-02-07 01:25:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113959995658121145 2025-02-07 02:17:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkjut5jtk24 2025-02-07 02:49:23+00:00| seen|...
Ransomware Extortion Drops to $813.5M in 2024, Down from $1.25B in 2023
Ransomware attacks netted cybercrime groups a total of $813.5 million in 2024, a decline from $1.25 billion in 2023. The total amount extorted during the first half of 2024 stood at $459.8 million, blockchain intelligence firm Chainalysis said, adding payment activity slumped after July 2024 by...
MicroDicom DICOM Viewer
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to alter network traffic and perform a machine-in-the-middle MITM attack. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such...