CVE-2025-49280 WordPress Magty theme <= 1.0.6 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Magty magty allows PHP Local File Inclusion.This issue affects Magty: from n/a through = 1.0.6...

CVE-2025-49281 WordPress Magways <= 1.2.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Unfoldwp Magways allows PHP Local File Inclusion. This issue affects Magways: from n/a through 1.2.1...

CVE-2025-49295 WordPress MediClinic theme <= 2.1 - Local File Inclusion Vulnerability

Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from n/a through = 2.1...

CVE-2025-49296 WordPress GrandPrix theme <= 1.6 - Local File Inclusion Vulnerability

Path Traversal: '.../...//' vulnerability in Mikado-Themes GrandPrix grandprix allows PHP Local File Inclusion.This issue affects GrandPrix: from n/a through = 1.6...

CVE-2025-5879

creationtimestamp| type| source ---|---|--- 2025-06-09 15:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr6q6s2tys2m...

CVE-2025-49130

Laravel Translation Manager is a package to manage Laravel translation files. Prior to version 0.6.8, the application is vulnerable to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input data. An attacker can inject arbitrary HTML code, including...

CVE-2025-27818

creationtimestamp| type| source ---|---|--- 2025-06-09 13:04:22+00:00| seen| https://seclists.org/oss-sec/2025/q2/236 2025-06-09 15:24:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lr6oqv6nhm2m 2025-06-10 08:32:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17840...

CVE-2025-41444

creationtimestamp| type| source ---|---|--- 2025-06-09 12:01:36+00:00| seen| Telegram/bTJ9s6Dm5c98HBwnHhlVxkUI4b7kIVaieHQvre00jyC9A 2025-06-09 12:36:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114653436896870669 2025-06-09 15:17:15+00:00| seen|...

CVE-2025-36528

creationtimestamp| type| source ---|---|--- 2025-06-09 12:01:36+00:00| seen| Telegram/bTJ9s6Dm5c98HBwnHhlVxkUI4b7kIVaieHQvre00jyC9A 2025-06-09 12:36:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114653436896870669...

CVE-2025-27709 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports...

WordPress Widget Logic <= 6.0.5 - Remote Code Execution (RCE) Vulnerability

Remote Code Execution RCE Vulnerability discovered by ch4r0n Patchstack Alliance in WordPress Plugin Widget Logic versions = 6.0.5...

CVE-2025-5871

The CVE-2025-5871 entry concerns Papendorf SOL Connect Center 3.3.0.0. The vulnerability affects the Web Interface component, with a missing/authentication-bypass flaw that allows remote access. Exploitation is described as remotely executable and the exploit has been disclosed publicly. Public d...

CVE-2025-5868

creationtimestamp| type| source ---|---|--- 2025-06-09 09:00:48+00:00| published-proof-of-concept| Telegram/DsgOWDcu9rxqKpsqPOtLg0t5RI81pwVIeAX7gB5uHK5m8 2025-06-09 09:39:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr63gymbv625...

CVE-2025-4652

creationtimestamp| type| source ---|---|--- 2025-06-09 07:23:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr5tvcjsf42e 2025-06-10 20:31:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17993 2026-02-11 17:16:15+00:00| confirmed|...

CVE-2025-47712

creationtimestamp| type| source ---|---|--- 2025-06-09 07:13:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr5tdfoczz2e 2026-01-08 05:03:39+00:00| seen| Telegram/36YuQ0XqAI4G5bdAUQmNkQIL1fMhKkwMpqpsGMiepBkvTc 2026-01-08 05:03:48+00:00| published-proof-of-concept|...

CVE-2025-47712

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service...

CVE-2025-47711 Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service

There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error,...

CVE-2025-5814

The Profiler – What Slowing Down Your WP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsdplugincontrol function in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to reactivate...

CVE-2025-5859

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /test-details.php. The manipulation of the argument assignto leads to sql injection. The attack can be launch...

CVE-2025-5854

creationtimestamp| type| source ---|---|--- 2025-06-09 02:00:40+00:00| published-proof-of-concept| Telegram/AJN0S8YZYdVmzbOgnKAjxxpHw3CsdDBYQVeb8zgl5Lh2q4 2025-06-09 03:08:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr5fmvlrcl2u...