CVE-2025-12595

creationtimestamp| type| source ---|---|--- 2025-11-02 10:31:51+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4nchnncxh26 2025-11-02 11:47:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ngoss5af2n 2025-12-23 12:48:55+00:00| seen|...

Exploit for CVE-2025-11174

CVE-2025-11174: Unauthenticated Information Disclosure in Word...

CVE-2025-11377

The List category posts plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 0.92.0 via the 'catlist' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with contributor-level...

EUVD-2025-37418

The List category posts plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 0.92.0 via the 'catlist' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with contributor-level...

CVE-2025-11377

The List category posts plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 0.92.0 via the 'catlist' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with contributor-level...

CVE-2025-11377 List category posts <= 0.92.0 - Authenticated (Contributor+) Information Exposure

The List category posts plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 0.92.0 via the 'catlist' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with contributor-level...

CVE-2025-11377 List category posts <= 0.92.0 - Authenticated (Contributor+) Information Exposure

The List category posts plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 0.92.0 via the 'catlist' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with contributor-level...

CVE-2025-11377

The CVE-2025-11377 case is supported by multiple connected sources: WordPress List category posts plugin 0.92.0) or follow vendor advisories for fixes. Monitor for updates from CVE databases and the plugin maintainers to confirm remediation efficacy.

CVE-2025-11174

CVE-2025-11174 affects WordPress Document Library Lite plugin. All versions up to 1.1.6 permit improper authorization via an unauthenticated AJAX action (dll_load_posts) exposed through wp-admin/admin-ajax.php, returning a JSON table of document data without nonce or capability checks. The attack...

CVE-2025-11174 Document Library Lite <= 1.1.6 - Missing Authorization to Sensitive Information Exposure

The Document Library Lite plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 1.1.6. This is due to the plugin exposing an unauthenticated AJAX action dllloadposts which returns a JSON table of document data without performing nonce or capability...

PT-2025-44703

Name of the Vulnerable Software and Affected Versions WordPress List category posts plugin versions prior to 0.92.0 Description The List category posts plugin for WordPress has an information exposure issue due to insufficient restrictions on posts included by the 'catlist' shortcode. This allows...

CVE-2025-11377: Exposure of Sensitive Information to an Unauthorized Actor

The List category posts plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 0.92.0 via the 'catlist' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with contributor-level...

WordPress plugin: List category posts – information leakage vulnerability

WordPress List category posts plugin is a tool in WordPress for outputting specified category posts in a customized order. WordPress List category posts plugin suffers from an information disclosure vulnerability that stems from an insufficient catlist shortcode restriction, which can be exploite...

CVE-2025-6520

creationtimestamp| type| source ---|---|--- 2025-10-31 09:01:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4i4ibnhwg2l 2025-10-31 09:26:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4i5vtt2zh2k 2025-10-31 12:56:27+00:00| seen|...

WordPress Plugin ACF Recent Posts Widget Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin ACF Recent Posts Widget, no...

CVE-2025-4665

creationtimestamp| type| source ---|---|--- 2025-10-29 01:31:47+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4ccgbrqfi23 2025-10-29 01:41:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ccxhx6zg24 2025-10-29 07:58:12+00:00| seen|...

CVE-2025-9152

creationtimestamp| type| source ---|---|--- 2025-10-28 07:28:27+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3m4afurktde2g 2025-10-28 07:39:32+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3m4agixqihf2d 2025-11-05 22:12:41+00:00| seen|...

CVE-2025-62905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Tadlock Query Posts query-posts allows Stored XSS.This issue affects Query Posts: from n/a through = 0.3.2...

CVE-2025-62958

Cross-Site Request Forgery CSRF vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts & Pages: from n/a through = 2.2.61...

CVE-2025-62954

Missing Authorization vulnerability in rsocial Revive Old Posts tweet-old-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive Old Posts: from n/a through = 9.3.3...