Lucene search
+L

237 matches found

RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.9 views

CVE-2025-68606

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through = 5.0.3...

5.3CVSS6.9AI score0.00229EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/24 3:30 p.m.12 views

EUVD-2025-205230

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through = 5.0.3...

7.5CVSS6.4AI score0.00229EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.15 views

CVE-2025-68606

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through = 5.0.3...

5.3CVSS0.00229EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/24 1:10 p.m.27 views

CVE-2025-68606

CVE-2025-68606 concerns Exposure of Sensitive System Information to an Unauthorized Actor in PostX (Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX). Wordfence lists this as an Unauthenticated Information Exposure affecting PostX up to version 5.0.3, with Patch Status Patche...

5.3CVSS6.5AI score0.00229EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 1:10 p.m.6 views

CVE-2025-68606 WordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through = 5.0.3...

5.3CVSS6.5AI score0.00229EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/24 1:10 p.m.37 views

CVE-2025-68606 WordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through = 5.0.3...

5.3CVSS0.00229EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.11 views

PT-2025-53293

Name of the Vulnerable Software and Affected Versions PostX versions through 5.0.3 Description A flaw exists in WPXPO PostX ultimate-post that allows the retrieval of embedded sensitive data, leading to exposure of sensitive system information to an unauthorized control sphere. Recommendations...

7.5CVSS6.3AI score0.00229EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.11 views

WordPress plugin PostX 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.3AI score0.00229EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/21 10:43 a.m.10 views

WordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Doan Dinh Van in WordPress Plugin PostX versions = 5.0.3...

7.5CVSS7AI score0.00229EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/21 2:20 a.m.6 views

CVE-2025-12980 Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the '/ultp/v2/getdynamiccontent/' REST API endpoint in all versions up to, and including, 5.0.3. This makes it possible...

7.5CVSS5.1AI score0.00315EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/21 2:20 a.m.40 views

CVE-2025-12980

CVE-2025-12980 affects the WordPress plugin Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX . The vulnerability is a Missing Authorization to Unauthenticated Sensitive Information Exposure via the REST endpoint /ultp/v2/get_dynamic_content/ in all versions up to 5.0.3, enabl...

7.5CVSS5.1AI score0.00315EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/21 12:00 a.m.17 views

PT-2025-52571

Name of the Vulnerable Software and Affected Versions PostX plugin for WordPress versions up to and including 5.0.3 Description The PostX plugin for WordPress is affected by a flaw that allows unauthorized access to data. A missing capability check on the /ultp/v2/get dynamic content/ REST API...

7.5CVSS6.1AI score0.00315EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/12/21 12:00 a.m.14 views

WordPress plugin Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Post...

7.5CVSS6.4AI score0.00315EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.9 views

CVE-2025-54751

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 4.1.36...

7.1CVSS7AI score0.00245EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.10 views

CVE-2025-55707

Incorrect Privilege Assignment vulnerability in WPXPO PostX ultimate-post allows Privilege Escalation.This issue affects PostX: from n/a through = 4.1.35...

7.2CVSS7AI score0.00394EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/18 9:30 a.m.12 views

EUVD-2025-204196

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 4.1.36...

7.1CVSS6.5AI score0.00245EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.7 views

EUVD-2025-204195

Incorrect Privilege Assignment vulnerability in WPXPO PostX ultimate-post allows Privilege Escalation.This issue affects PostX: from n/a through = 4.1.35...

7.2CVSS6.5AI score0.00394EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/18 8:15 a.m.10 views

CVE-2025-54751

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 4.1.36...

7.1CVSS0.00245EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/18 8:15 a.m.10 views

CVE-2025-55707

Incorrect Privilege Assignment vulnerability in WPXPO PostX ultimate-post allows Privilege Escalation.This issue affects PostX: from n/a through = 4.1.35...

7.2CVSS0.00394EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:21 a.m.6 views

CVE-2025-54751 WordPress PostX plugin <= 4.1.36 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 4.1.36...

6.6AI score0.00245EPSS
SaveExploits0References1
Rows per page
Query Builder