CVE-2025-23428

creationtimestamp| type| source ---|---|--- 2025-02-14 13:08:41+00:00| seen| https://infosec.exchange/users/cve/statuses/114002396522413460 2025-02-14 13:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bxhap3n2d...

CVE-2025-0867

creationtimestamp| type| source ---|---|--- 2025-02-14 12:49:42+00:00| seen| https://infosec.exchange/users/cve/statuses/114002321891252776 2025-02-14 12:53:40+00:00| seen| https://infosec.exchange/users/cve/statuses/114002337449684066 2025-02-14 13:16:08+00:00| seen|...

CVE-2024-13735

creationtimestamp| type| source ---|---|--- 2025-02-14 09:29:30+00:00| seen| https://infosec.exchange/users/cve/statuses/114001534633593944 2025-02-14 10:16:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4xwlt7gz2s 2025-02-14 10:44:38+00:00| seen|...

CVE-2024-57969

creationtimestamp| type| source ---|---|--- 2025-02-14 06:39:04+00:00| seen| https://infosec.exchange/users/cve/statuses/114000864455141980 2025-02-14 07:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4nsnzkeh2s 2025-02-14 07:25:25+00:00| seen|...

CVE-2024-13692

The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.4.5 via several functions due to missing validation on a user...

CVE-2024-7052

creationtimestamp| type| source ---|---|--- 2025-02-14 06:06:16+00:00| seen| https://infosec.exchange/users/cve/statuses/114000735509819627 2025-02-14 06:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4kije6zr24 2025-02-14 07:09:58+00:00| seen|...

CVE-2024-13641 Return Refund and Exchange For WooCommerce <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the 'attachment' directory. This makes it possible for...

CVE-2024-13641 Return Refund and Exchange For WooCommerce <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the 'attachment' directory. This makes it possible for...

WordPress plugin Return Refund and Exchange For WooCommerce 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

WordPress plugin Return Refund and Exchange For WooCommerce 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An authorization issue vulnerability exists...

CVE-2024-57378

creationtimestamp| type| source ---|---|--- 2025-02-13 21:58:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113998818929513545 2025-02-13 22:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3pn55e222i 2025-02-14 10:09:24+00:00| seen|...

CVE-2025-24836

creationtimestamp| type| source ---|---|--- 2025-02-13 21:58:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113998818943958722 2025-02-13 22:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3pnnapk62a 2025-02-14 01:16:44+00:00| seen|...

CVE-2024-11347

creationtimestamp| type| source ---|---|--- 2025-02-13 18:58:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113998108985571018 2025-02-13 19:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3flxeq5x2z 2025-02-13 20:34:56+00:00| seen|...

WordPress Return Refund and Exchange For WooCommerce plugin <= 4.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference vulnerability

Authenticated Subscriber+ Insecure Direct Object Reference vulnerability discovered by Tim Coen in WordPress Plugin Return Refund and Exchange For WooCommerce versions = 4.4.5...

WordPress Return Refund and Exchange For WooCommerce plugin <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability

Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability discovered by Tim Coen in WordPress Plugin Return Refund and Exchange For WooCommerce versions = 4.4.5...

CVE-2025-24889

creationtimestamp| type| source ---|---|--- 2025-02-13 17:37:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113997790534218207 2025-02-13 18:18:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3cfi2hv32c 2025-02-13 19:10:04+00:00|...

GHSA-933Q-FX9H-5G46

creationtimestamp| type| source ---|---|--- 2025-02-13 17:37:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113997790534218207 2025-02-13 19:10:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4297...

CVE-2025-25389

creationtimestamp| type| source ---|---|--- 2025-02-13 17:06:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113997667839106491 2025-02-13 17:17:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li36xzrstv2a 2025-02-13 18:50:23+00:00| seen|...

CVE-2024-12012

creationtimestamp| type| source ---|---|--- 2025-02-13 16:04:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113997425572119565...

CVE-2025-25357

creationtimestamp| type| source ---|---|--- 2025-02-13 16:02:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113997416238600584 2025-02-13 16:17:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li33mazbca2x 2025-02-13 17:12:42+00:00|...