GHSA-73G8-5H73-26H4

creationtimestamp| type| source ---|---|--- 2025-11-21 20:14:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115589518891298219...

GHSA-GWF3-8GM3-QRMJ

creationtimestamp| type| source ---|---|--- 2025-11-21 18:40:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115589147730637509...

CVE-2025-12160

creationtimestamp| type| source ---|---|--- 2025-11-21 10:33:54+00:00| seen| https://infosec.exchange/users/offseq/statuses/115587234746500780 2025-11-21 10:33:56+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m653hulupn2l 2025-11-21 11:43:35+00:00| seen|...

SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny

The U.S. Securities and Exchange Commission SEC has abandoned its lawsuit against SolarWinds and its chief information security officer, alleging that the company had misled investors about the security practices that led to the 2020 supply chain attack. In a joint motion filed November 20, 2025,...

CVE-2025-12881 Return Refund and Exchange For WooCommerce <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Order Message Read

The Return Refund and Exchange For WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.5.5 via the wpsrmafetchordermsgs due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wi...

CVE-2025-12881

CVE-2025-12881 concerns the WordPress plugin Return Refund and Exchange For WooCommerce (versions up to 4.5.5). It suffers an Insecure Direct Object Reference due to missing validation on a user-controlled key in wps_rma_fetch_order_msgs(), enabling authenticated attackers with Subscriber level a...

CVE-2025-12086 Return Refund and Exchange For WooCommerce <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Refund Request Cancellation

The Return Refund and Exchange For WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.5.5 via the 'wpsrmacancelreturnrequest' AJAX endpoint due to missing validation on a user controlled key. This makes it possible for...

CVE-2025-12086 Return Refund and Exchange For WooCommerce <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Refund Request Cancellation

The Return Refund and Exchange For WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.5.5 via the 'wpsrmacancelreturnrequest' AJAX endpoint due to missing validation on a user controlled key. This makes it possible for...

CVE-2025-64310

creationtimestamp| type| source ---|---|--- 2025-11-21 03:03:09+00:00| seen| https://infosec.exchange/users/offseq/statuses/115585462301435855 2025-11-21 03:03:11+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m64cbiaajw2l 2025-11-21 03:26:50+00:00| seen|...

WordPress plugin Return Refund and Exchange For WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

WordPress plugin Return Refund and Exchange For WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2025-62207

creationtimestamp| type| source ---|---|--- 2025-11-20 22:44:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115584444564008370 2025-11-20 23:21:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m63vvcoqcb2b 2025-11-21 07:42:47+00:00| seen|...

CVE-2025-64657

creationtimestamp| type| source ---|---|--- 2025-11-20 22:44:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115584444564008370 2025-11-21 08:17:42+00:00| seen| https://gist.github.com/Darkcrai86/59e466b543fc6dbd4a049c096a3aea8d 2025-11-26 01:04:02+00:00| seen|...

CVE-2025-64660

creationtimestamp| type| source ---|---|--- 2025-11-20 22:44:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115584444564008370 2025-11-26 02:38:02+00:00| seen| https://bsky.app/profile/secqube.com/post/3m6it6keobo23...

CVE-2025-64656

creationtimestamp| type| source ---|---|--- 2025-11-20 22:44:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115584444564008370 2025-11-21 06:33:04+00:00| seen| https://bsky.app/profile/secqube.com/post/3m64nxz7n672z...

GHSA-88PH-3236-2M2H

creationtimestamp| type| source ---|---|--- 2025-11-20 18:06:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115583352611017978...

CVE-2025-65222

creationtimestamp| type| source ---|---|--- 2025-11-20 15:10:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115582661903555688...

CVE-2025-65223

creationtimestamp| type| source ---|---|--- 2025-11-20 15:10:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115582661903555688...

CVE-2025-65221

creationtimestamp| type| source ---|---|--- 2025-11-20 15:10:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115582661903555688...

TencentOS Server 3: gnutls (TSSA-2024:0046)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0046 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...