CVE-2025-39352

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16942 2025-05-19 20:48:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpkgzzbsrv2h...

CVE-2025-39348

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16939 2025-05-19 20:48:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpkgzy3bgd2n 2025-05-19 22:39:39+00:00| seen|...

CVE-2025-31027

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16932 2025-05-19 22:39:28+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpknavuya6l2...

CVE-2025-32925 WordPress SUMO Reward Points plugin <= 30.7.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in FantasticPlugins SUMO Reward Points rewardsystem allows PHP Local File Inclusion.This issue affects SUMO Reward Points: from n/a through = 30.7.0...

CVE-2025-32926 WordPress Grand Restaurant WordPress theme <= 7.0 - Path Traversal to PHP Object Injection vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Path Traversal.This issue affects Grand Restaurant: from n/a through = 7.0...

CVE-2025-32926 WordPress Grand Restaurant WordPress theme <= 7.0 - Path Traversal to PHP Object Injection vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Path Traversal.This issue affects Grand Restaurant: from n/a through = 7.0...

CVE-2025-39348 WordPress Grand Restaurant WordPress theme <= 7.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Restaurant: from n/a through = 7.0...

CVE-2024-44840

creationtimestamp| type| source ---|---|--- 2025-05-19 19:44:27+00:00| seen| https://gist.github.com/mstfsec/ee17035dddc16ea361009a6427843d97...

CVE-2025-43837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in binti76 Total Donations total-donations allows Reflected XSS.This issue affects Total Donations: from n/a through = 3.0.8...

CVE-2025-22287 WordPress LTL Freight Quotes – FreightQuote Edition plugin <= 2.3.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a through = 2.3.1...

CVE-2024-55063

creationtimestamp| type| source ---|---|--- 2025-05-19 17:24:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114535658467359667 2025-05-19 18:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpka2dnzi72v...

CVE-2025-47583

Cross-Site Request Forgery CSRF vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking system: from n/a through = 10.16...

CVE-2025-4945 Libsoup: integer overflow in cookie expiration date handling in libsoup

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

CVE-2025-4945

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

CVE-2025-39388 WordPress AnalyticsWP plugin <= 2.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Solid Plugins AnalyticsWP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects AnalyticsWP: from n/a through 2.0.0...

CVE-2025-39371 WordPress Author Box Plugin With Different Description plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sanjeev Mohindra Author Box Plugin With Different Description allows Cross Site Request Forgery.This issue affects Author Box Plugin With Different Description: from n/a through 1.3.5...

CVE-2025-39370 WordPress iCafe Library plugin <= 1.8.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in cnilsson iCafe Library icafe-library allows SQL Injection.This issue affects iCafe Library: from n/a through = 1.8.3...

CVE-2025-31185

creationtimestamp| type| source ---|---|--- 2025-05-19 16:39:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16883 2025-05-19 17:13:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zbibc62l...

CVE-2025-32920

creationtimestamp| type| source ---|---|--- 2025-05-19 16:38:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16869 2025-05-19 17:13:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zbvm7f2h...

WordPress Cost of Goods for WooCommerce plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Cost of Goods for WooCommerce versions = 3.7.0...