PT-2025-5962 · Unknown · Scweber Custom Comment Notifications

Name of the Vulnerable Software and Affected Versions: scweber Custom Comment Notifications versions 1.0.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a...

WordPress plugin Custom Comment Notifications 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2024-57392

creationtimestamp| type| source ---|---|--- 2025-02-06 21:29:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113959065799738457 2025-02-06 22:16:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk4gpdegp2d 2025-02-06 22:49:14+00:00| seen|...

CVE-2024-52892

creationtimestamp| type| source ---|---|--- 2025-02-06 19:32:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113958608936576132 2025-02-06 20:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvoyrcog2t 2025-02-06 21:55:30+00:00| seen|...

CVE-2024-57672

creationtimestamp| type| source ---|---|--- 2025-02-06 19:27:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113958586418028421 2025-02-06 20:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvp5g5gg2v 2025-02-06 21:55:22+00:00| seen|...

CVE-2024-57673

creationtimestamp| type| source ---|---|--- 2025-02-06 19:27:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113958586432409277 2025-02-06 20:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvp7oaxq2t 2025-02-06 21:55:23+00:00| seen|...

CVE-2024-36557

creationtimestamp| type| source ---|---|--- 2025-02-06 17:35:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113958148829513343 2025-02-06 17:39:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113958164013597777 2025-02-06 18:16:28+00:00| seen|...

CVE-2022-31764

creationtimestamp| type| source ---|---|--- 2025-02-06 14:29:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113957414797440247 2025-02-06 15:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjevk3qka2c 2025-02-06 17:44:18+00:00| seen|...

CVE-2024-57958

creationtimestamp| type| source ---|---|--- 2025-02-06 13:17:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6beztgr2j 2025-02-06 16:03:51+00:00| seen| https://t.me/cvedetector/17385 2025-02-06 16:43:52+00:00| seen|...

CVE-2025-0522

creationtimestamp| type| source ---|---|--- 2025-02-06 06:04:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113955428858903035 2025-02-06 06:17:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhigtb6ly32j 2025-02-06 08:38:24+00:00| seen|...

CVE-2025-22357

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdever Target Notifications target-notifications allows Reflected XSS.This issue affects Target Notifications: from n/a through = 1.1.1...

CVE-2024-49795

creationtimestamp| type| source ---|---|--- 2025-02-05 23:43:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113953933731078863 2025-02-06 00:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhsodhxdv2f 2025-02-06 02:44:21+00:00| seen|...

CVE-2024-49793

creationtimestamp| type| source ---|---|--- 2025-02-05 23:38:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113953911479301532 2025-02-06 00:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhso5x6252c 2025-02-06 02:44:21+00:00| seen|...

CVE-2024-49792

creationtimestamp| type| source ---|---|--- 2025-02-05 23:38:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113953911464730553 2025-02-06 00:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhso3megv2i 2025-02-06 02:44:21+00:00| seen|...

CVE-2022-41906

OpenSearch Notifications is a notifications plugin for OpenSearch that enables other plugins to send notifications via Email, Slack, Amazon Chime, Custom web-hook etc channels. A potential SSRF issue in OpenSearch Notifications Plugin starting in 2.0.0 and prior to 2.2.1 could allow an existing...

CVE-2024-38317

creationtimestamp| type| source ---|---|--- 2025-02-05 22:47:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113953711407713975 2025-02-05 23:16:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhpbzweme2c 2025-02-06 01:50:46+00:00| seen|...

CVE-2024-57077

creationtimestamp| type| source ---|---|--- 2025-02-05 22:16:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxrouxi2b 2025-02-06 06:31:26+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-7qgg-vw88-cc99 2025-02-06 16:48:33+00:00| seen|...

CVE-2024-57082

creationtimestamp| type| source ---|---|--- 2025-02-05 21:16:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113953353403713809 2025-02-05 22:17:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhly67a672i 2025-02-06 01:50:59+00:00| seen|...

CVE-2025-20169

creationtimestamp| type| source ---|---|--- 2025-02-05 16:37:05+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113952255128702135 2025-02-05 17:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh35luk6r2c 2025-02-05 19:09:21+00:00| seen|...

CVE-2025-20207

creationtimestamp| type| source ---|---|--- 2025-02-05 16:37:05+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113952255128702135 2025-02-05 16:51:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113952312528088269 2025-02-05 17:16:33+00:00| seen|...