WordPress Seriously Simple Podcasting plugin <= 3.9.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Seriously Simple Podcasting versions = 3.9.0...

CVE-2025-46237

creationtimestamp| type| source ---|---|--- 2025-04-22 10:03:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12830 2025-04-22 11:04:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju5d3mx2l 2025-04-22 14:13:41+00:00| seen|...

CVE-2025-46252

creationtimestamp| type| source ---|---|--- 2025-04-22 10:02:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12816 2025-04-22 11:05:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6umig2v 2025-04-22 14:13:28+00:00| seen|...

CVE-2025-31353

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01 2025-06-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-396/...

CVE-2025-30030

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01 2025-06-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-388/...

CVE-2025-1976

creationtimestamp| type| source ---|---|--- 2025-04-22 07:47:32+00:00| seen| https://bsky.app/profile/andranglin.bsky.social/post/3lnf6t77jcc25 2025-04-23 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lnj3pgntgn2t 2025-04-24 04:05:58+00:00| seen|...

CVE-2025-26413

creationtimestamp| type| source ---|---|--- 2025-04-22 07:21:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lnf5fbk2n52h 2025-04-22 08:02:11+00:00| seen| https://bsky.app/profile/potato.software/post/3lnf7nhiw7x27 2025-04-22 08:03:52+00:00| seen|...

CVE-2025-26413

CVE-2025-26413 describes an improper input validation in Apache Kvrocks where the SETRANGE command does not verify that the offset input is a positive integer, using it as a string index and potentially causing a server crash (out-of-range index). Affected versions are Kvrocks up to 2.11.1; remed...

CVE-2025-2291

creationtimestamp| type| source ---|---|--- 2025-04-22 01:38:00+00:00| seen| https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3lnek5qwsyqo2 2025-04-23 07:35:38+00:00| seen| https://bsky.app/profile/theemerichunter.bsky.social/post/3lnhomvsxmg25 2025-08-09 13:26:56+00:00...

CVE-2025-3855

Summary of CVE-2025-3855 (CodeCanyon RISE Ultimate Project Manager 3.8.2) A vulnerability exists in the component “Profile Picture Handler” for the endpoint /index.php/team_members/save_profile_image/ where the argument profile_image_file is manipulated, leading to improper control of resource id...

CVE-2025-2987

creationtimestamp| type| source ---|---|--- 2025-04-22 00:03:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12772 2025-04-22 03:04:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lneoz3bexw2t 2025-04-22 04:11:22+00:00| seen| https://t.me/cvedetector/23476...

CVE-2025-32955

creationtimestamp| type| source ---|---|--- 2025-04-21 21:02:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12760 2025-04-21 23:04:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lneblkxtth2l 2025-04-22 00:00:22+00:00| seen|...

CVE-2025-23174

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2025-32793

creationtimestamp| type| source ---|---|--- 2025-04-21 16:02:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12686 2025-04-21 18:59:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lndtv7rzho2y 2025-04-21 19:49:42+00:00| seen|...

CVE-2025-3839

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this...

CVE-2025-43970

creationtimestamp| type| source ---|---|--- 2025-04-21 01:02:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12628 2025-04-21 01:51:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114373444529201097 2025-04-21 02:49:17+00:00| seen|...

CVE-2025-43961

creationtimestamp| type| source ---|---|--- 2025-04-21 00:05:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12627 2025-04-21 02:49:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnc5oyakao2l 2025-04-21 03:56:19+00:00| seen|...

CVE-2025-28104

The CVE-2025-28104 entry concerns FlaskBlog (laskBlog) v2.6.1 with an incorrect access control flaw that lets an attacker retrieve all usernames through a crafted input. Multiple connected sources (Red Hat, NVD, CVE lists, PT Security, CNNVD, OSV, CIRCL, and others) corroborate the issue, describ...

CVE-2025-29659

Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmdlisten" function located in the "cmd" binary...

CVE-2025-43919

GNU Mailman 2.1.39, as bundled in cPanel and WHM, allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman aka the private archive authentication endpoint via the username parameter. NOTE: multiple third parties report that they are unable t...