CVE-2025-36854

creationtimestamp| type| source ---|---|--- 2025-09-08 15:20:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydixmqfrc2r 2025-09-08 15:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydjjjmrkh2r 2025-09-08 15:53:16+00:00| seen| https://t.me/canyoupwnme/6960...

CVE-2025-36855

creationtimestamp| type| source ---|---|--- 2025-09-08 15:11:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydigyqxqj2d 2025-09-08 15:15:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydiood4vf2l 2025-09-08 15:53:15+00:00| seen| https://t.me/canyoupwnme/6959...

CVE-2025-5993

creationtimestamp| type| source ---|---|--- 2025-09-08 12:55:18+00:00| seen| https://t.me/canyoupwnme/6946 2025-09-08 12:55:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydauq2m2x2r 2025-09-08 13:15:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydbyjpfui26...

CVE-2025-6757

The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rpwe' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-7368

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajaxactionregetfullcontent' function due to insufficient restrictions on which posts can be included. This makes i...

CVE-2025-6757

The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rpwe' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-6757 Recent Posts Widget Extended <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode

The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rpwe' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-6757 Recent Posts Widget Extended <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode

The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rpwe' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-6757

CVE-2025-6757 – Recent Posts Widget Extended (WordPress) The vulnerability is in the Recent Posts Widget Extended plugin for WordPress, affecting versions up to and including 2.0.2. It is a Stored Cross-Site Scripting (XSS) flaw in the plugin’s rpwe shortcode caused by insufficient input sanitiza...

CVE-2025-7368

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajaxactionregetfullcontent' function due to insufficient restrictions on which posts can be included. This makes i...

CVE-2025-7368 Rehub <= 19.9.7 - Unauthenticated Password Protected Post Disclosure

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajaxactionregetfullcontent' function due to insufficient restrictions on which posts can be included. This makes i...

CVE-2025-7368

CVE-2025-7368 — REHub WordPress Theme: Unauthenticated information exposure in REHub up to version 19.9.7 due to insufficient restrictions in the ajax_action_re_getfullcontent path, allowing access to password-protected post data. Affected: REHub Theme for WordPress (versions ≤ 19.9.7). Root caus...

CVE-2025-7368 Rehub <= 19.9.7 - Unauthenticated Password Protected Post Disclosure

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajaxactionregetfullcontent' function due to insufficient restrictions on which posts can be included. This makes i...

CVE-2025-7368: Exposure of Sensitive Information to an Unauthorized Actor

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajaxactionregetfullcontent' function due to insufficient restrictions on which posts can be included. This makes i...

PT-2025-36364

Name of the Vulnerable Software and Affected Versions: Recent Posts Widget Extended plugin for WordPress versions up to and including 2.0.2 Description: The Recent Posts Widget Extended plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s rpwe shortcode...

WordPress plugin Recent Posts Widget Extended Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-6757: Improper Neutralization of Input During Web Page Generation

The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rpwe' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

PT-2025-36348

Name of the Vulnerable Software and Affected Versions: REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme versions prior to 19.9.8 Description: The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme for WordPress is susceptible to information exposure due to...

WordPress Rehub theme <= 19.9.7 - Unauthenticated Password Protected Post Disclosure vulnerability

Unauthenticated Password Protected Post Disclosure vulnerability discovered by stealthcopter in WordPress Theme Rehub versions = 19.9.7...

CVE-2025-58613

Missing Authorization vulnerability in Barn2 Plugins Posts Table with Search & Sort posts-data-table allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Table with Search & Sort: from n/a through = 1.4.10...