CVE-2025-4171 WZ Followed Posts – Display what visitors are reading <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WZ Followed Posts – Display what visitors are reading plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wfp' shortcode in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

CVE-2025-4171

CVE-2025-4171 affects the WordPress plugin WZ Followed Posts – Display what visitors are reading, with Stored XSS via the wfp shortcode in all versions up to 3.1.0. The vulnerability requires authenticated access at the Contributor level or higher and arises from insufficient input sanitization a...

CVE-2025-4171 WZ Followed Posts – Display what visitors are reading <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WZ Followed Posts – Display what visitors are reading plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wfp' shortcode in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

PT-2025-20176 · Data443 Risk Mitigation · Inline Related Posts

Name of the Vulnerable Software and Affected Versions: Data443 Risk Migitation, Inc. Inline Related Posts versions n/a through 3.8.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS in...

PT-2025-20035 · WordPress · Wz Followed Posts

Name of the Vulnerable Software and Affected Versions: WZ Followed Posts – Display what visitors are reading plugin for WordPress versions up to and including 3.1.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'wfp' shortcode due to insufficient input...

PT-2025-20136 · Unknown · Eli'S Related Posts Footer Links/Widget

Name of the Vulnerable Software and Affected Versions: ELI's Related Posts Footer Links and Widget versions 1.2.04.20 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended...

PT-2025-20130 · Unknown · Contextual Related Posts

Name of the Vulnerable Software and Affected Versions: Ajay Contextual Related Posts versions n/a through 4.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an...

CVE-2025-2905

creationtimestamp| type| source ---|---|--- 2025-05-05 09:18:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14842 2025-05-05 10:21:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3log5hwunmf2o 2025-05-05 13:01:47+00:00| seen|...

Improper Authorization

github.com/mattermost/mattermost-server is vulnerable to improper authorization. The vulnerability is due to insufficient permission validation for the API endpoint /plugins/playbooks/api/v0/signal/keywords/ignore-thread, allowing any user or attacker to delete posts created by the Playbooks bot...

CVE-2025-4237

creationtimestamp| type| source ---|---|--- 2025-05-03 15:19:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14695 2025-05-03 16:38:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lobq6adw53s2 2025-05-03...

CVE-2024-13738

creationtimestamp| type| source ---|---|--- 2025-05-03 03:00:20+00:00| seen| https://bsky.app/profile/potato.software/post/3loadvtqidf2m 2025-05-03 03:26:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loafeewn5vx2 2025-05-03...

CVE-2023-53141

creationtimestamp| type| source ---|---|--- 2025-05-02 17:34:19+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo7c2mv5kd32 2025-05-02 20:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo7mr4dh5p2t 2025-05-02...

CVE-2025-2421

creationtimestamp| type| source ---|---|--- 2025-05-02 12:15:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14470 2025-05-02 14:30:45+00:00| seen| Telegram/gpPWfjLuV20S4nQMGoLdmx6S8j9EZS2EZ0Gv11uVGyL8 2025-05-02 14:38:25+00:00| seen|...

CVE-2025-46337

creationtimestamp| type| source ---|---|--- 2025-05-01 17:57:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114433867704399481 2025-05-01 20:00:50+00:00| published-proof-of-concept| Telegram/QFVP5TcYkEi5fC3DYhpbJ3tJ8sPusYmL1ImuYd1RRjGW6cE 2025-05-01 20:35:57+00:00| seen|...

CVE-2025-3952

creationtimestamp| type| source ---|---|--- 2025-05-01 05:14:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14234 2025-05-01 05:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114431001387714484 2025-05-01 05:56:14+00:00| seen|...

CVE-2025-32973

creationtimestamp| type| source ---|---|--- 2025-04-30 15:48:37+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114427698608004436 2025-04-30 16:30:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo27ru6vjs2n 2025-04-30 17:32:01+00:00| seen|...

CVE-2025-4114

creationtimestamp| type| source ---|---|--- 2025-04-30 12:12:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14008 2025-04-30 12:35:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114426941022216347 2025-04-30 13:48:40+00:00| seen|...

CVE-2025-23180

creationtimestamp| type| source ---|---|--- 2025-04-29 17:12:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13873 2025-04-29 17:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114422508457622087 2025-04-29 19:02:24+00:00| published-proof-of-concept|...

CVE-2025-24132

creationtimestamp| type| source ---|---|--- 2025-04-29 14:21:44+00:00| seen| https://bsky.app/profile/dysternis.bsky.social/post/3lnxi4jp6lc2g 2025-04-29 22:16:51+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/34679 2025-04-29 22:33:24+00:00| published-proof-of-concept|...

CVE-2025-24271

creationtimestamp| type| source ---|---|--- 2025-04-29 03:50:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnweuf73wn2a 2025-04-29 04:29:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114419366184694515 2025-04-29 06:47:56+00:00| seen|...