forest 安全漏洞

forest is RYMCU open source a modern knowledge community backend project , using SpringBoot + Shiro + MyBatis + JWT + Redis implementation . A security vulnerability exists in forest version f782e85, which stems from a flaw in the doBefore function in the AuthorshipAspect.java file, which could...

CVE-2025-63687

An issue was discovered in rymcu forest thru commit f782e85 2025-09-04 in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts...

EUVD-2025-38103

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through = 1.0.4.2...

CVE-2025-60244

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

CVE-2025-60244 WordPress TableOn plugin <= 1.0.5.1 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

CVE-2025-60244

CVE-2025-60244 concerns a Basic XSS in the WordPress TableOn plugin (RealMag777 TableOn posts-table-filterable) caused by improper neutralization of script-related HTML tags, enabling code injection. Affected versions are TableOn &lt;= 1.0.4.2 (per initial sources); later entries also reference

CVE-2025-64473

creationtimestamp| type| source ---|---|--- 2025-11-06 06:45:50+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4wxo4d7gqd2 2025-11-06 07:47:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4x35jpwfy2n...

PT-2025-45285

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through = 1.0.4.2...

CVE-2025-12192

creationtimestamp| type| source ---|---|--- 2025-11-05 12:37:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4v2vuqmqd2q 2025-11-05 13:01:38+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4v46hbihcp2...

CVE-2025-43442

creationtimestamp| type| source ---|---|--- 2025-11-05 12:06:48+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4uz4iazgdu2 2025-11-05 12:40:22+00:00| seen| https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3m4v2yocp7nv2...

CVE-2025-43455

creationtimestamp| type| source ---|---|--- 2025-11-05 12:06:48+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4uz4iazgdu2 2025-11-05 12:40:22+00:00| seen| https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3m4v2yocp7nv2...

CVE-2025-12674

creationtimestamp| type| source ---|---|--- 2025-11-05 09:01:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4uot2g3672s 2025-11-05 09:37:05+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4uqq2z2xyc2 2025-11-05 09:40:49+00:00| seen|...

CVE-2025-11162

creationtimestamp| type| source ---|---|--- 2025-11-05 06:20:58+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4uftfpq75w2 2025-11-05 06:56:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4uhttd6es2k...

CVE-2025-12156

The Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savepostdata function in versions 2.0.7 to 2.2.6. This makes it possible for authenticated attackers, with...

CVE-2025-64106

creationtimestamp| type| source ---|---|--- 2025-11-05 01:11:25+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4tuj2mno4x2 2025-11-05 01:32:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4tvpvvdnk2k...

CVE-2025-62719

creationtimestamp| type| source ---|---|--- 2025-11-05 01:11:05+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4tuitk5n542 2025-11-05 01:46:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4twjix6hp2k...

WordPress List category posts plugin information leakage vulnerability

WordPress List category posts plugin is a tool in WordPress for outputting specified category posts in a customized order. WordPress List category posts plugin suffers from an information disclosure vulnerability that stems from an insufficient catlist shortcode restriction, which can be exploite...

CVE-2025-39973

creationtimestamp| type| source ---|---|--- 2025-11-04 13:43:54+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m4so4who5u2e 2025-11-04 13:44:08+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m4so5eagu72c 2025-11-07 03:34:24+00:00| seen|...

CVE-2025-20749

creationtimestamp| type| source ---|---|--- 2025-11-04 08:46:13+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4s5i7avwfe2 2025-11-04 09:42:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4sanpfyyb2k...

CVE-2025-20747

creationtimestamp| type| source ---|---|--- 2025-11-04 08:46:01+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4s5hlntsnx2 2025-11-04 09:45:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4sas6rxmp2n...