23603 matches found
CVE-2025-27350
CVE-2025-27350 is a Reflected XSS in the Vice Versa WordPress plugin (Hugh Mungus), affecting Vice Versa up to version 2.2.3. Root cause: improper input neutralization during web page generation. CVSS v3.1 base score 7.1 (HIGH). No exploitation details or patch/version remediation provided in the...
CVE-2025-32202
creationtimestamp| type| source ---|---|--- 2025-04-10 09:49:01+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114313038071535604...
CVE-2025-23386
creationtimestamp| type| source ---|---|--- 2025-04-10 09:48:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11218 2025-04-10 11:32:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmhfsnlebu2u 2025-04-10 13:41:24+00:00| seen| https://t.me/cvedetector/22644 2025-04-11...
CVE-2025-32212
creationtimestamp| type| source ---|---|--- 2025-04-10 08:49:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11216 2025-04-10 11:10:54+00:00| seen| https://t.me/cvedetector/22640...
CVE-2025-32140
Unrestricted Upload of File with Dangerous Type vulnerability in Nirmal Kumar Ram WP Remote Thumbnail wp-remote-thumbnail allows Upload a Web Shell to a Web Server.This issue affects WP Remote Thumbnail: from n/a through = 1.3.2...
CVE-2024-38865
Improper neutralization of livestatus command delimiters in a specific endpoint within RestAPI of Checkmk prior to 2.2.0p39, 2.3.0p25, and 2.1.0p51 EOL allows arbitrary livestatus command execution. Exploitation requires the attacker to have a contact group assigned to their user account and for ...
CVE-2025-32259 WordPress WP ULike plugin <= 4.7.9.1 - Content Spoofing Vulnerability
Missing Authorization vulnerability in Alimir WP ULike wp-ulike.This issue affects WP ULike: from n/a through = 4.7.9.1...
CVE-2025-32216 WordPress Spider Elements – Addons for Elementor plugin <= 1.6.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Spider Themes Spider Elements spider-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spider Elements: from n/a through = 1.6.6...
CVE-2025-32213
CVE-2025-32213 (Flo Forms – Flo Forms plugin for WordPress) is a Missing Authorization vulnerability in Flo Forms
CVE-2025-32205 WordPress Piotnet Forms plugin <= 1.0.30 - Path Traversal vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in piotnetdotcom Piotnet Forms piotnetforms.This issue affects Piotnet Forms: from n/a through = 1.0.30...
CVE-2025-32205
CVE-2025-32205 concerns Piotnet Forms. A path traversal issue affects Piotnet Forms versions from any earlier release up to 1.0.30. The vulnerability is currently listed as Unpatched in Wordfence/related sources, with a CVSS v3.1 base score of 2.7 (LOW). No exploitation details are provided in th...
CVE-2025-32115 WordPress Popping Content Light plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Popping Content Light popping-content-light allows Reflected XSS.This issue affects Popping Content Light: from n/a through = 2.4...
CVE-2025-32115 WordPress Popping Content Light plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Popping Content Light allows Reflected XSS. This issue affects Popping Content Light: from n/a through 2.4...
CVE-2025-30582
CVE-2025-30582 is an active Local File Inclusion (LFI) vulnerability in aytechnet’s DyaPress ERP/CRM, caused by improper limitation of a pathname to a restricted directory. Affected software ranges from n/a up to version 18.0.2.0. The root cause is inadequate pathname restriction, enabling PHP Lo...
CVE-2024-13896
The WP-GeSHi-Highlight — rock-solid syntax highlighting for 259 languages WordPress plugin through 1.4.3 processes user-supplied input as a regular expression via the wpgeshifilterreplacecode function, which could lead to Regular Expression Denial of Service ReDoS issue...
CVE-2024-13909
The Accredible Certificates & Open Badges plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...
CVE-2024-10894
CVE-2024-10894 affects the WordPress plugin Payment Forms for Paystack. It is a stored XSS via shortcode attributes (datepicker, textarea, text) in all versions up to 4.0.2 due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at contributor level ...
CVE-2024-13874
creationtimestamp| type| source ---|---|--- 2025-04-10 06:48:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11196 2025-04-10 09:32:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmh73tkn3m2i...
