CVE-2025-9089

creationtimestamp| type| source ---|---|--- 2025-08-17 00:01:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwkldig54h24 2025-08-17 04:07:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwkz3juvot23 2025-08-17 04:12:31+00:00| seen|...

CVE-2025-54706

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Magical Posts Display magical-posts-display allows DOM-Based XSS.This issue affects Magical Posts Display: from n/a through = 1.2.52...

CVE-2025-52728

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows PHP Local File Inclusion.This issue affects Responsive Posts Carousel Pro: from n/a through = 15...

CVE-2025-49895

creationtimestamp| type| source ---|---|--- 2025-08-16 04:12:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwiivx455a2g 2025-08-16 04:17:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwij6vofpw2e...

CVE-2025-8995

creationtimestamp| type| source ---|---|--- 2025-08-15 16:41:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115033774613870687 2025-08-15 16:42:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115033777031743124 2025-08-15 20:27:00+00:00| seen|...

CVE-2025-8091

The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4.6 via the addsingleeventon and addeventon shortcodes due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to...

CVE-2025-8091 EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure

The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4.6 via the addsingleeventon and addeventon shortcodes due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to...

CVE-2025-8091 EventON Lite <= 2.4.6 - Authenticated (Contributor+) Information Disclosure

The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4.6 via the addsingleeventon and addeventon shortcodes due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to...

PT-2025-33465 · WordPress · Eventon Lite

Name of the Vulnerable Software and Affected Versions: EventON Lite versions prior to 2.4.7 Description: The EventON Lite plugin for WordPress is vulnerable to Information Exposure in versions prior to 2.4.7 via the add single eventon and add eventon shortcodes. Insufficient restrictions on post...

Malicious code in @zalastax/nolb-posts (npm)

The package @zalastax/nolb-posts was found to contain malicious code...

MAL-2025-13242 Malicious code in @zalastax/nolb-posts (npm)

The package @zalastax/nolb-posts was found to contain malicious code...

MAL-2025-8758 Malicious code in @malware-test-leams-posts-sudor-birle/test-mlw3-leams-posts-sudor-birle (npm)

The package @malware-test-leams-posts-sudor-birle/test-mlw3-leams-posts-sudor-birle was found to contain malicious code...

CVE-2025-9039

creationtimestamp| type| source ---|---|--- 2025-08-14 17:58:52+00:00| seen| https://bsky.app/profile/infosecindustry.bsky.social/post/3lwew5ds6ux2p 2025-08-14 18:27:41+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lwexquc3no25 2025-08-14 19:45:33+00:00| seen|...

CVE-2025-8714

creationtimestamp| type| source ---|---|--- 2025-08-14 13:25:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115027339401596750 2025-08-14 22:36:29+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lwffnooc5k2w 2025-08-15 06:42:27+00:00| seen|...

CVE-2025-54706

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Magical Posts Display magical-posts-display allows DOM-Based XSS.This issue affects Magical Posts Display: from n/a through = 1.2.52...

CVE-2025-52728

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows PHP Local File Inclusion.This issue affects Responsive Posts Carousel Pro: from n/a through = 15...

CVE-2025-55674

creationtimestamp| type| source ---|---|--- 2025-08-14 11:09:23+00:00| seen| https://seclists.org/oss-sec/2025/q3/107 2025-08-14 13:30:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lweh5v4hus2o 2025-08-14 15:02:16+00:00| seen|...

CVE-2025-54706 WordPress Magical Posts Display Plugin plugin <= 1.2.52 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Magical Posts Display allows DOM-Based XSS. This issue affects Magical Posts Display: from n/a through 1.2.52...

CVE-2025-54706 WordPress Magical Posts Display Plugin plugin <= 1.2.52 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Magical Posts Display magical-posts-display allows DOM-Based XSS.This issue affects Magical Posts Display: from n/a through = 1.2.52...

CVE-2025-54706

CVE-2025-54706 concerns the WordPress plugin Magical Posts Display (versions up to and including 1.2.52). The issue is a DOM-based cross-site scripting (XSS) vulnerability caused by improper neutralization of user input during web page generation. Impact, per the sources, is low to medium across ...