PT-2025-22139

Name of the Vulnerable Software and Affected Versions: TYPO3 versions 9.0.0 through 9.5.50 ELTS TYPO3 versions 10.0.0 through 10.4.49 ELTS TYPO3 versions 11.0.0 through 11.5.43 ELTS TYPO3 versions 12.0.0 through 12.4.30 LTS TYPO3 versions 13.0.0 through 13.4.11 LTS Description: The issue affects...

VMware Cloud Foundation security vulnerabilities

VMware Cloud Foundation is an all-in-one hybrid cloud platform from VMware. The platform includes features such as operations automation, infrastructure auto-configuration and integrated lifecycle management. VMware Cloud Foundation suffers from an authorization issue vulnerability that stems fro...

WordPress Ninja Forms plugin < 3.10.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Ninja Forms versions 3.10.1...

CVE-2025-4939

creationtimestamp| type| source ---|---|--- 2025-05-19 17:13:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zaxgh52j...

CVE-2025-39373 WordPress JNews Theme <= 11.6.16 - Broken Access Control Vulnerability

Missing Authorization vulnerability in jegtheme JNews jnews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JNews: from n/a through = 11.6.16...

CVE-2025-31185

creationtimestamp| type| source ---|---|--- 2025-05-19 16:39:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16883 2025-05-19 17:13:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zbibc62l...

CVE-2024-33939

The Masteriyo - LMS WordPress plugin (versions

CVE-2025-47946

creationtimestamp| type| source ---|---|--- 2025-05-19 12:04:13+00:00| seen| https://bsky.app/profile/symfony.com/post/3lpjjr442kx2g 2025-05-19 19:39:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16915 2025-05-19 21:13:12+00:00| seen|...

CVE-2025-47756

creationtimestamp| type| source ---|---|--- 2025-05-19 08:38:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16824 2025-05-19 09:13:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjaa2aofg2p...

CVE-2025-4913

creationtimestamp| type| source ---|---|--- 2025-05-19 06:38:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16812 2025-05-19 09:13:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpja7zma4c2w...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

WordPress Plugin Oficial – Getnet para WooCommerce plugin < 1.8.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Plugin Oficial – Getnet para WooCommerce versions 1.8.1...

WordPress wooexim plugin <= 5.0.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin WOOEXIM versions = 5.0.0...

WordPress CYAN Backup plugin < 2.5.3 - Admin+ Stored XSS via General Settings vulnerability

Admin+ Stored XSS via General Settings vulnerability discovered by Bob Matyas in WordPress Plugin CYAN Backup versions 2.5.3...

WordPress MapPress Maps for WordPress plugin < 2.93 - Admin+ Stored XSS via Map Settings vulnerability

Admin+ Stored XSS via Map Settings vulnerability discovered by Kientt in WordPress Plugin MapPress Maps for WordPress versions 2.93...

WordPress Page Builder: Pagelayer plugin < 1.9.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin PageLayer versions 1.9.0...

WordPress The Events Calendar plugin < 6.6.4 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin The Events Calendar versions 6.6.4...

WordPress JavaScript Logic plugin <= 0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Daniel Ruf in WordPress Plugin JavaScript Logic versions = 0.1...

CVE-2025-4905

creationtimestamp| type| source ---|---|--- 2025-05-19 02:38:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16789 2025-05-19 05:13:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissi7n642h...

CVE-2025-4906

creationtimestamp| type| source ---|---|--- 2025-05-19 02:38:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16788 2025-05-19 05:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissiqwkl2p...