CVE-2025-56432

creationtimestamp| type| source ---|---|--- 2025-08-26 16:15:50+00:00| seen| Telegram/LOoWECzn7KtgJ9KtXQPPq-BQMFnKnGfzqQY-oeJaNmgVmQ...

CVE-2025-6366

The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. This is due to the plugin not properly validating a user's capabilities prior to updating their profile in the elupdateprofile function. This makes it possible for authenticated...

CVE-2025-25736

creationtimestamp| type| source ---|---|--- 2025-08-26 15:15:32+00:00| seen| Telegram/Xf2Ai8BJ2taTM5kjAmgswD0tRrm7AR8CLSp3ab7TaXyKDI...

CVE-2025-6366

CVE-2025-6366 – The Event List WordPress plugin (versions ≤ 2.0.4) is vulnerable to privilege escalation due to insufficient validation of user capabilities in el_update_profile(). Authenticated users with Subscriber+ can elevate to administrator. Evidence from Wordfence/NVD/CVE records indicates...

CVE-2025-6366 Event List <= 2.0.4 - Authenticated (Subscriber+) Privilege Escalation

The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. This is due to the plugin not properly validating a user's capabilities prior to updating their profile in the elupdateprofile function. This makes it possible for authenticated...

CVE-2025-6366 Event List <= 2.0.4 - Authenticated (Subscriber+) Privilege Escalation

The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. This is due to the plugin not properly validating a user's capabilities prior to updating their profile in the elupdateprofile function. This makes it possible for authenticated...

CVE-2025-1501

creationtimestamp| type| source ---|---|--- 2025-08-26 11:15:46+00:00| seen| Telegram/N27lOVdqnw3XiA9FipVDMdRbb-8yxSrjMRPvSw5pFgA5pbU...

CVE-2025-31277

creationtimestamp| type| source ---|---|--- 2025-08-26 08:16:53+00:00| seen| https://vulnerability.circl.lu/bundle/c1aa3b44-ae54-436b-b3c3-a88194ecb70e 2026-03-18 15:22:35+00:00| exploited| https://t.me/truesecator/8007 2026-03-19 21:02:58+00:00| seen|...

CVE-2025-48005

creationtimestamp| type| source ---|---|--- 2025-08-26 06:30:26+00:00| seen| https://infosec.place/objects/932cb874-108d-4ab8-a61b-e391dc9ab55e...

CVE-2025-54481

creationtimestamp| type| source ---|---|--- 2025-08-26 06:00:34+00:00| seen| https://infosec.place/objects/b2da2ec8-4c53-4b1c-895a-87a06d68df32...

CVE-2025-9431

creationtimestamp| type| source ---|---|--- 2025-08-26 04:49:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbpmfrhrk2z...

CVE-2025-38675

creationtimestamp| type| source ---|---|--- 2025-08-26 01:33:32+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lxbeobmuss24...

CVE-2025-9415

creationtimestamp| type| source ---|---|--- 2025-08-26 01:24:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbe5zhmbu2k...

CVE-2025-56216

creationtimestamp| type| source ---|---|--- 2025-08-26 01:03:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbcz4otav2o...

CVE-2025-57802

creationtimestamp| type| source ---|---|--- 2025-08-26 00:34:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbbeontzw24...

CVE-2025-57772

creationtimestamp| type| source ---|---|--- 2025-08-26 00:27:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbaxynb7a2d 2026-07-20 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr3cozezzy2l...

WordPress plugin Event List 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin Event List...

PT-2025-34779 · WordPress · Event List

Name of the Vulnerable Software and Affected Versions: Event List plugin for WordPress versions up to and including 2.0.4 Description: The Event List plugin for WordPress is susceptible to privilege escalation. This occurs because the plugin does not adequately validate a user’s capabilities befo...

CVE-2025-54483

creationtimestamp| type| source ---|---|--- 2025-08-25 17:32:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxajshbnrf27 2025-08-26 06:00:33+00:00| seen| https://infosec.place/objects/b2da2ec8-4c53-4b1c-895a-87a06d68df32...

CVE-2025-54488

creationtimestamp| type| source ---|---|--- 2025-08-25 16:41:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxagwzgkrj2z 2025-08-26 06:00:34+00:00| seen| https://infosec.place/objects/b2da2ec8-4c53-4b1c-895a-87a06d68df32...