127 matches found
CVE-2025-14080 Frontend Post Submission Manager Lite <= 1.2.5 - Missing Authorization to Unauthenticated Arbitrary Post Modification
The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.5. This is due to missing authorization checks on the post update functionality in the fpsmlformprocess AJAX action. This makes it possible for...
CVE-2025-14080 Frontend Post Submission Manager Lite <= 1.2.5 - Missing Authorization to Unauthenticated Arbitrary Post Modification
The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.5. This is due to missing authorization checks on the post update functionality in the fpsmlformprocess AJAX action. This makes it possible for...
CVE-2025-67747
creationtimestamp| type| source ---|---|--- 2025-12-15 18:20:51+00:00| published-proof-of-concept| https://github.com/trailofbits/fickling/security/advisories/GHSA-565g-hwwr-4pp3 2026-01-02 18:46:25+00:00| published-proof-of-concept| Telegram/PJ0624gDLdyTO0vVvr-4zwa3ib0JJFcfMDnXcsBI6RfrbkA...
CVE-2025-63561
creationtimestamp| type| source ---|---|--- 2025-10-31 22:22:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4jjabsxux2q...
CVE-2025-11857
The XX2WP Integration Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mxpfb2wpdisplayembed' shortcode in all versions up to, and including, 1.9.9. This is due to the plugin not properly sanitizing user input and output of the 'postid' parameter. This makes it...
EUVD-2025-27661
Malicious code in bioql PyPI...
CVE-2025-9073
The All in one Minifier plugin for WordPress is vulnerable to SQL Injection via the 'postid' parameter in all versions up to, and including, 3.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2025-9073 All in one Minifier <= 3.2 - Unauthenticated SQL Injection
The All in one Minifier plugin for WordPress is vulnerable to SQL Injection via the 'postid' parameter in all versions up to, and including, 3.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
WordPress plugin All in one Minifier SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability...
CVE-2025-9528
creationtimestamp| type| source ---|---|--- 2025-08-27 13:21:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115100934432942527 2025-11-25 21:02:41+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6iagq53b62e...
CVE-2025-9470
creationtimestamp| type| source ---|---|--- 2025-08-26 04:54:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbpvrkpv72w...
CVE-2025-38675
creationtimestamp| type| source ---|---|--- 2025-08-26 01:33:32+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lxbeobmuss24...
CVE-2025-57802
creationtimestamp| type| source ---|---|--- 2025-08-26 00:34:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbbeontzw24...
CVE-2025-3478
creationtimestamp| type| source ---|---|--- 2025-08-26 00:08:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxb7x5ju5a27...
CVE-2025-53557
creationtimestamp| type| source ---|---|--- 2025-08-25 16:50:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxahh2v73c2k 2025-08-26 06:00:39+00:00| seen| https://infosec.place/objects/f58fe91f-d2e8-4a25-ab91-5686831af03f...
📄 WordPress WP Reactions Box 1.0 SQL Injection
WordPress WP Reactions Box plugin versions 1.0 and below suffer from a remote SQL Injection vulnerability. Exploit Title: WordPress WP Reactions Box Plugin 1.0 - SQL Injection Google Dork: N/A Date: 2025-08-24 Exploit Author: bRpsd cyatlive.no Vendor Homepage:...
CVE-2025-9388
creationtimestamp| type| source ---|---|--- 2025-08-24 14:54:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx5qiiyp3w22...
CVE-2025-50860
creationtimestamp| type| source ---|---|--- 2025-08-22 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwze4uefae2z...