PT-2025-22123 · WordPress · Order Delivery Date

Name of the Vulnerable Software and Affected Versions: Order Delivery Date WordPress plugin versions prior to 12.4.0 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the plugin does not properly sanitise and escape a parameter before outputting it...

CVE-2025-2929: Improper Neutralization of Input During Web Page Generation

The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (May 2025)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress plugin “Order Delivery Date” has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

CVE-2025-48340

creationtimestamp| type| source ---|---|--- 2025-05-19 22:39:27+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpknauqadfo2 2025-05-20 00:43:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpku6jskox2p...

CVE-2025-39356

creationtimestamp| type| source ---|---|--- 2025-05-19 20:48:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpkgzynq4d2h...

CVE-2025-39355

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16944 2025-05-19 20:48:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpkgzycd3t24...

CVE-2025-39348

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16939 2025-05-19 20:48:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpkgzy3bgd2n 2025-05-19 22:39:39+00:00| seen|...

CVE-2025-32924

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16933 2025-05-19 20:48:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpkgzxs7ht24 2025-05-19 22:39:29+00:00| seen|...

CVE-2024-52879

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16930...

GHSA-HXW5-9CC5-CMW5

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16929...

WordPress Qi Blocks plugin < 1.4 - Contributor+ Stored XSS via Counter Block vulnerability

Contributor+ Stored XSS via Counter Block vulnerability discovered by Krugov Artyom in WordPress Plugin Qi Blocks versions 1.4...

CVE-2025-27010

creationtimestamp| type| source ---|---|--- 2025-05-19 19:39:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16924...

GHSA-5J3W-5PCR-F8HG

creationtimestamp| type| source ---|---|--- 2025-05-19 19:39:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16915...

CVE-2025-39451

creationtimestamp| type| source ---|---|--- 2025-05-19 19:38:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16908...

CVE-2025-48236

creationtimestamp| type| source ---|---|--- 2025-05-19 18:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpka2bh7ju2h...

CVE-2025-39454

creationtimestamp| type| source ---|---|--- 2025-05-19 17:38:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16887...

CVE-2025-4945

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

CVE-2025-4948

creationtimestamp| type| source ---|---|--- 2025-05-19 17:13:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zbsjmx2n 2025-05-26 07:46:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17535...

CVE-2025-4945 Libsoup: integer overflow in cookie expiration date handling in libsoup

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...