16676 matches found
CVE-2025-6222 WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet <= 3.2.6 - Unauthenticated Arbitrary File Upload
The WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'cedrnxorderexchangeattachfiles' function in all versions up to, and including, 3.2.6. This...
WordPress plugin WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WooCommerce Refund And...
CVE-2024-41921
creationtimestamp| type| source ---|---|--- 2025-07-17 19:23:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114870205065116436...
CVE-2024-13972
creationtimestamp| type| source ---|---|--- 2025-07-17 19:03:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114870125851359984 2025-07-18 05:43:48+00:00| seen| https://poliverso.org/objects/0477a01e-b4ff51d2-3ebe177d5dcd7fd6...
CVE-2025-7433
creationtimestamp| type| source ---|---|--- 2025-07-17 19:03:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114870125851359984 2025-07-18 05:43:48+00:00| seen| https://poliverso.org/objects/0477a01e-b4ff51d2-3ebe177d5dcd7fd6...
GHSA-29CQ-5W36-X7W3
creationtimestamp| type| source ---|---|--- 2025-07-17 18:42:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114870042350039767...
GhostContainer backdoor: malware compromising Exchange servers of high-value organizations in Asia
In a recent incident response IR case, we discovered highly customized malware targeting Exchange infrastructure within government environments. Analysis of detection logs and clues within the sample suggests that the Exchange server was likely compromised via a known N-day vulnerability. Our...
CVE-2025-52689
creationtimestamp| type| source ---|---|--- 2025-07-16 12:58:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114863027202378870 2025-07-16 15:00:12+00:00| published-proof-of-concept| Telegram/Zn-MrGH2EZw9krb9LKB7CZ2NwqA9UnK4k-IFktRqyAhV2A 2025-09-09 20:56:47+00:00| seen|...
CVE-2025-52690
creationtimestamp| type| source ---|---|--- 2025-07-16 12:58:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114863027202378870...
GHSA-R2FW-9CW4-MJ86
creationtimestamp| type| source ---|---|--- 2025-07-15 21:07:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114859287202602004...
GHSA-7M6H-FQRM-M9C5
creationtimestamp| type| source ---|---|--- 2025-07-15 20:05:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114859043908564960...
GHSA-93HX-V9PV-QRM4
creationtimestamp| type| source ---|---|--- 2025-07-15 19:56:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114859009211207817...
CVE-2025-41239
creationtimestamp| type| source ---|---|--- 2025-07-15 18:53:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114858762801914674 2025-07-16 12:20:29+00:00| seen| https://vulnerability.circl.lu/bundle/419fd7d2-3c77-4032-b717-747015a7b289 2025-07-16 12:26:04+00:00| seen|...
CVE-2025-6558
creationtimestamp| type| source ---|---|--- 2025-07-15 17:28:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114858427241820895 2025-07-16 02:00:41+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3lu2d3bwjds2n 2025-07-16 04:00:00+00:00| seen|...
GHSA-XQG6-5WFV-4855
creationtimestamp| type| source ---|---|--- 2025-07-15 15:28:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114857955667613596...
CVE-2025-7042
creationtimestamp| type| source ---|---|--- 2025-07-15 15:19:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114857919005997369 2025-07-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-615/...
CVE-2025-6973
creationtimestamp| type| source ---|---|--- 2025-07-15 15:19:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114857919005997369 2025-07-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-620/...
CVE-2025-6965
creationtimestamp| type| source ---|---|--- 2025-07-15 14:17:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114857677350230802 2025-07-15 18:28:42+00:00| seen| https://bsky.app/profile/jgreig.bsky.social/post/3ltzjt2lmsc2t 2025-07-16 05:44:00+00:00| seen|...