PT-2025-2266 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The reason for the rejection is mentioned, but no further details are provided about the issue. Recommendations: At the moment, there is no...

PT-2025-2073

Name of the Vulnerable Software and Affected Versions Privacy Policy Genius WordPress plugin versions through 2.0.4 Description The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitised and escaped before being outputted back in the page. This...

CVE-2024-23970

creationtimestamp| type| source ---|---|--- 2025-01-30 23:46:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113919969185194340 2025-01-31 00:17:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgypvjn4fb2c 2025-01-31 01:12:07+00:00| seen|...

CVE-2025-0683

creationtimestamp| type| source ---|---|--- 2025-01-30 18:23:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113918699513994287 2025-01-30 22:30:06+00:00| seen| https://bsky.app/profile/mytechnotalent.bsky.social/post/3lgyjvwampk2s 2025-01-30 22:38:34+00:00| seen|...

CVE-2025-24099

creationtimestamp| type| source ---|---|--- 2025-01-30 16:38:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113918286393203602 2025-01-30 17:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxydxlo652p 2025-01-30 19:35:06+00:00| seen|...

CVE-2024-55417

creationtimestamp| type| source ---|---|--- 2025-01-30 15:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnqiog32n 2025-01-30 16:00:07+00:00| seen| https://t.me/truesecator/6678 2025-01-30 18:27:13+00:00| seen| https://t.me/cvedetector/16805 2025-01-31...

CGA-CH9P-V9J8-8P5F

Bulletin has no description...

CVE-2025-22222

creationtimestamp| type| source ---|---|--- 2025-01-30 14:22:34+00:00| seen| https://bsky.app/profile/seifreed.bsky.social/post/3lgxoo4zsue2g 2025-01-30 16:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxuywfuci2w 2025-01-30 18:26:54+00:00| seen|...

CGA-H7G3-GRRX-VHQX

Bulletin has no description...

CGA-V76X-XH6C-57XQ

Bulletin has no description...

CVE-2024-13380

creationtimestamp| type| source ---|---|--- 2025-01-30 12:39:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113917345289941698 2025-01-30 13:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxkwdgylb2b 2025-08-26 18:36:19+00:00| seen|...

CGA-VW4F-2V6Q-MGW7

Bulletin has no description...

CGA-QFRF-PG5P-G88X

Bulletin has no description...

CGA-PCWM-GW4R-82XP

Bulletin has no description...

CVE-2024-13457

creationtimestamp| type| source ---|---|--- 2025-01-30 06:49:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113915968954823693 2025-01-30 07:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwwsj5phs2e 2025-01-30 10:05:00+00:00| seen|...

CVE-2024-13457

CVE-2024-13457 affects the WordPress plugin Event Tickets and Registration (WordPress Event Tickets) up to and including version 5.18.1 . The vulnerability is an Insecure Direct Object Reference via the tc-order-id parameter, arising from missing validation on a user-controlled key. This allows u...

CVE-2024-12709

creationtimestamp| type| source ---|---|--- 2025-01-30 06:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwti56psl2c 2025-01-30 06:24:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113915871722055927 2025-01-30 07:11:24+00:00| seen|...

SUSE CVE-2025-23047

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...

PT-2025-2180 · WordPress · Event Tickets/Registration

Name of the Vulnerable Software and Affected Versions: Event Tickets and Registration plugin for WordPress versions up to, and including, 5.18.1 Description: The issue allows unauthenticated attackers to view order details of orders they did not place, which includes ticket prices, user emails, a...

CVE-2024-13457: Improper Access Control

The Event Tickets and Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.18.1 via the tc-order-id parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to view ord...