CVE-2025-32507

CVE-2025-32507 is a reflected Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin “Event Espresso – Custom Email Template Shortcode.” It arises from improper input neutralization during web page generation and affects versions up to 1.0.0. The CVSS 3.1 vector indicates attack require...

CVE-2022-43486

creationtimestamp| type| source ---|---|--- 2025-04-17 14:58:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12245...

CVE-2025-22090

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VMPAT handling when fork fails in copypagerange If trackpfncopy fails, we already added the dst VMA to the maple tree. As fork fails, we'll cleanup the maple tree, and stumble over the dst VMA for which we neither...

Security Bulletin: Multiple Vulnerabilities in IBM Event Streams

Summary Multiple vulnerabilities were addressed in IBM Event Streams version 11.6.1. Vulnerability Details CVEID:CVE-2024-47764 DESCRIPTION: jshttp cookie could allow a remote attacker to bypass security restrictions, caused by improper input validation by the cookie name, path, and domain. By...

CVE-2025-3726

creationtimestamp| type| source ---|---|--- 2025-04-17 00:25:56+00:00| seen| https://t.me/cvedetector/23181...

WordPress plugin HT Event 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Event Espresso – Custom Email Template Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Event Espresso -...

CVE-2025-32507: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aakif Kadiwala Event Espresso – Custom Email Template Shortcode email-shortcode allows Reflected XSS.This issue affects Event Espresso – Custom Email Template Shortcode: from n/a through = 1.0.0...

CVE-2025-24624: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DevItems HT Event ht-event allows Reflected XSS.This issue affects HT Event: from n/a through = 1.4.6...

PT-2025-17087 · Event Espresso · Event Espresso – Custom Email Template Shortcode

Name of the Vulnerable Software and Affected Versions: Event Espresso – Custom Email Template Shortcode versions 1.0.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in...

CVE-2024-40072

creationtimestamp| type| source ---|---|--- 2025-04-16 20:14:22+00:00| seen| https://t.me/cvedetector/23132...

GHSA-8G35-7RMW-7F59

creationtimestamp| type| source ---|---|--- 2025-04-16 18:56:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12139...

RHSA-2025:3798

creationtimestamp| type| source ---|---|--- 2025-04-16 18:56:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12130...

CVE-2025-32866

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxapthz7d2u 2025-04-16 20:48:37+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605944527789 2025-04-16 21:54:51+00:00| seen|...

CVE-2025-23131

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...

AZL-69653 CVE-2025-23131 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...

AZL-62788 CVE-2025-23131 affecting package kernel for versions less than 6.6.144.1-1

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...

DEBIAN-CVE-2025-23131

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...

UBUNTU-CVE-2025-23131

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...

CVE-2025-39575

creationtimestamp| type| source ---|---|--- 2025-04-16 12:56:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12027 2025-04-16 16:03:09+00:00| seen| https://t.me/cvedetector/23104...