GO-2025-3504 vulnerabilities

Vulnerabilities for packages: tigera-operator, tigera-operator-fips...

CVE-2025-3504

creationtimestamp| type| source ---|---|--- 2025-05-01 06:13:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14238 2025-05-01 09:55:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo426b7bib2r 2025-05-01 10:39:08+00:00| seen| https://t.me/cvedetector/24194...

CVE-2025-3504 WP Maps < 4.7.2 - Admin+ Stored XSS

The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2025-3504

CVE-2025-3504 affects the WP Maps WordPress plugin prior to 4.7.2. The issue is that map settings aren’t properly sanitized/escaped, enabling stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (e.g., multisite). Remediation: upgrade to WP Maps 4.7.2 or later...