SUSE CVE-2025-13352

Mattermost versions 10.11.x = 10.11.6 and Mattermost GitHub plugin versions =2.4.0 fail to validate plugin bot identity in reaction forwarding which allows attackers to hijack the GitHub reaction feature to make users add reactions to arbitrary GitHub objects via crafted notification posts...

PT-2026-1424

Name of the Vulnerable Software and Affected Versions MasterStudy LMS WordPress Plugin versions through 3.7.6 Description The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is susceptible to unauthorized modification and deletion of data. This is due to a...

PT-2026-1420

Name of the Vulnerable Software and Affected Versions GamiPress – Gamification plugin for WordPress versions prior to 7.6.2 Description The GamiPress – Gamification plugin for WordPress is susceptible to unauthorized data access. A missing capability check in the gamipress ajax get posts and...

CVE-2025-13215: Exposure of Sensitive Information to an Unauthorized Actor

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.17.13 via the auxelsajaxsearch due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers...

CVE-2025-53966

creationtimestamp| type| source ---|---|--- 2026-01-05 20:59:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpdem5l3o2e 2026-01-05 23:27:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbplmykqi32m...

CVE-2025-64420

creationtimestamp| type| source ---|---|--- 2026-01-05 20:25:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbpbhxuib22a 2026-01-05 20:25:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbpbiidogk2f 2026-01-05 20:49:13+00:00| seen|...

CVE-2025-64419

creationtimestamp| type| source ---|---|--- 2026-01-05 20:25:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbpbhqkwvq2t 2026-01-05 20:25:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbpbiaulia2p 2026-01-05 20:52:13+00:00| seen|...

CVE-2025-65110

creationtimestamp| type| source ---|---|--- 2026-01-05 19:29:01+00:00| published-proof-of-concept| https://github.com/vega/vega/security/advisories/GHSA-829q-m3qg-ph8r 2026-01-05 22:19:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbphtmlv552a 2026-01-05 23:05:27+00:00|...

CVE-2025-61246

creationtimestamp| type| source ---|---|--- 2026-01-05 19:00:10+00:00| published-proof-of-concept| Telegram/uMCzxGgr2x3STZAp0ylOr-SeDC6RAcnQeh3DqIsWZXD5kaQ 2026-01-05 21:00:04+00:00| published-proof-of-concept| Telegram/NXxnKLZSaBlQTQxt0WJ9c3G9QPSHY40ZYnU5qA6mvG8vUA 2026-01-08 22:23:36+00:00| see...

CVE-2025-55204

creationtimestamp| type| source ---|---|--- 2026-01-05 18:21:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbp2ky5zo42t 2026-01-05 19:06:38+00:00| published-proof-of-concept| Telegram/fMtvesIEGvLKzgXVr04EQ2rBgwnPRUk0FUIDqd1543CWh4 2026-01-05 21:44:39+00:00| seen|...

CVE-2025-39484

creationtimestamp| type| source ---|---|--- 2026-01-05 17:17:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbowyjoq472u 2026-01-05 17:18:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbowztoynb2e 2026-01-05 17:19:17+00:00| seen|...

CVE-2026-21633

creationtimestamp| type| source ---|---|--- 2026-01-05 17:17:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbowycvl6y2z 2026-01-05 17:18:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbowzmj6l322 2026-01-05 17:19:10+00:00| seen|...

CVE-2025-15026

creationtimestamp| type| source ---|---|--- 2026-01-05 16:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbosoph6zz2m 2026-01-05 16:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbospettl72a 2026-01-05 16:05:40+00:00| seen|...

CVE-2025-68280

creationtimestamp| type| source ---|---|--- 2026-01-05 14:18:24+00:00| seen| https://seclists.org/oss-sec/2026/q1/17 2026-01-05 15:30:46+00:00| seen| https://gist.github.com/Darkcrai86/1f974350056ca093e9738c65c3452ad1 2026-01-05 15:55:46+00:00| seen|...

CVE-2025-68033

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through = 1.8.0...

CVE-2025-68033 WordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through = 1.8.0...

CVE-2025-68033

The CVE-2025-68033 entry concerns Custom Related Posts (Brecht) for WordPress, affecting versions up to 1.8.0. It is an Unauthenticated Information Exposure vulnerability described as Insertion of Sensitive Information Into Sent Data, enabling retrieval of embedded sensitive data. Wordfence detai...

CVE-2025-68033 WordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through 1.8.0...

CVE-2025-15460

creationtimestamp| type| source ---|---|--- 2026-01-05 06:28:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbnsqbfqyb2b 2026-01-05 06:29:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbnsqwbesx2p 2026-01-05 07:00:40+00:00|...

CVE-2025-15459

creationtimestamp| type| source ---|---|--- 2026-01-05 06:28:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbnspzutnm2v 2026-01-05 06:29:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbnsqownet2z 2026-01-05 07:00:40+00:00|...