CVE-2025-5144

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-’ parameters in all versions up to, and including, 6.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-47950

creationtimestamp| type| source ---|---|--- 2025-06-11 12:17:31+00:00| seen| https://bsky.app/profile/cloud-native.activitypub.awakari.com.ap.brid.gy/post/3lrdf7pspa5i2...

CVE-2025-4315

creationtimestamp| type| source ---|---|--- 2025-06-11 10:35:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18064 2025-06-11 11:03:08+00:00| seen| Telegram/NGz98OHuB76pMx88tOKfrQtc8XVIqKfHlr0e5BI3wIw-X8 2025-06-11 11:03:35+00:00| seen| Telegram/buh-ut9DiubPByy1siFNTwRZbQngXllC1XVuRrrneGPkx...

CVE-2025-5991

creationtimestamp| type| source ---|---|--- 2025-06-11 08:32:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18062 2025-06-11 11:22:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdc653rej23...

CVE-2025-29756

creationtimestamp| type| source ---|---|--- 2025-06-11 08:32:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18061 2025-06-11 11:03:08+00:00| seen| Telegram/NGz98OHuB76pMx88tOKfrQtc8XVIqKfHlr0e5BI3wIw-X8 2025-06-11 11:03:35+00:00| seen| Telegram/buh-ut9DiubPByy1siFNTwRZbQngXllC1XVuRrrneGPkx...

CVE-2025-49790

creationtimestamp| type| source ---|---|--- 2025-06-11 05:30:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcohtyrbq2s...

CVE-2025-49788

creationtimestamp| type| source ---|---|--- 2025-06-11 05:10:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcneq3sbt2m...

CVE-2024-1244

creationtimestamp| type| source ---|---|--- 2025-06-11 03:37:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18040 2025-06-11 05:18:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcnthzptu2a 2025-06-11 11:03:35+00:00| seen|...

CVE-2025-49158

creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-365/...

CVE-2025-49155

creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-362/ 2025-06-17 21:27:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrtgqtbo5a2m...

CVE-2025-5833

creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-350/ 2025-06-25 18:51:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19506...

CVE-2025-5828

creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-347/ 2025-06-25 18:52:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19519...

CVE-2025-5475

creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-353/ 2025-06-21 00:45:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19088 2025-06-21 01:06:42+00:00| seen| Telegram/q14G5iMdD1KloDs67Eh6qp4P7SNmxxJpkJgZchwtZmEFQ...

CVE-2025-5984

creationtimestamp| type| source ---|---|--- 2025-06-11 02:38:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrceurbktc2s...

GHSA-3CRH-39QV-FXJ7

creationtimestamp| type| source ---|---|--- 2025-06-11 02:37:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18039 2025-06-11 11:03:44+00:00| published-proof-of-concept| Telegram/P3uzVteJIOiG3Gg-zKek4C3h9lNxS0xZPtAdcuiBiGspWs...

CVE-2025-47849

creationtimestamp| type| source ---|---|--- 2025-06-11 02:12:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcdfkdc372p 2025-06-14 04:33:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18353...

CVE-2025-49091

KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code...

WordPress Zota Theme <= 1.3.8 is vulnerable to Local File Inclusion

Software Zota Type Theme Vulnerable versions = 1.3.8 Fixed in 1.3.9 OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2025-49257 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 511b31ea918b Credits Phat RiO - BlueRock Required privilege...

WordPress Aora Theme <= 1.3.9 is vulnerable to Local File Inclusion

Software Aora Type Theme Vulnerable versions = 1.3.9 Fixed in 1.3.10 OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2025-49260 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID c279fefa752d Credits Phat RiO - BlueRock Required privilege...

CVE-2025-5144: Improper Neutralization of Input During Web Page Generation

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-’ parameters in all versions up to, and including, 6.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...