CVE-2025-54942

creationtimestamp| type| source ---|---|--- 2025-08-30 08:54:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxm77igvbd2r 2025-08-30 09:01:49+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxm7lqmmfm2q...

WordPress Plugin Related Posts Lite: Cross-Site Request Forgery Vulnerability

WordPress Related Posts Lite plugin is a tag-based relevance of the article recommendation plugin, mainly used to improve the site content relevance and user browsing experience. A cross-site request forgery vulnerability exists in the WordPress Related Posts Lite plugin, which stems from missing...

CVE-2025-9618: Cross-Site Request Forgery (CSRF)

The Related Posts Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to modify plugin...

WordPress Related Posts Lite plugin <= 1.12 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Claw.k in WordPress Plugin Related Posts Lite versions = 1.12...

Security Bulletin: Vulnerability in Netty's HttpPostRequestDecoder Allows Unbounded Memory Accumulation, which affects IBM watsonx.data

Summary Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The HttpPostRequestDecoder can be tricked to accumulate data. While the decoder can store items on the disk if configured so, there are no...

CVE-2025-53508

creationtimestamp| type| source ---|---|--- 2025-08-29 06:53:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxjhy4zsvb2j 2025-08-29 07:32:04+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxjk4du74a2p...

CVE-2025-7956

The Ajax Search Lite plugin for WordPress is vulnerable to Basic Information Exposure due to missing authorization in its AJAX search handler in all versions up to, and including, 4.13.1. This makes it possible for unauthenticated attackers to issue repeated AJAX requests to leak the content of a...

CVE-2025-7956

The CVE-2025-7956 entry concerns Ajax Search Lite for WordPress. It exposes Basic Information through a missing authorization check in ASL_Query within the AJAX search handler, affecting versions up to 4.13.1 (some sources reference 4.13.2 as the fix). The vulnerability allows unauthenticated att...

PT-2025-34968

Name of the Vulnerable Software and Affected Versions: Ajax Search Lite versions prior to 4.13.2 Description: The Ajax Search Lite plugin for WordPress is susceptible to Basic Information Exposure. A missing authorization check in the AJAX search handler allows unauthenticated attackers to...

Exploit for CVE-2025-11926

CVE credited: CVE-2025-11926 Related Posts Lite XSS PoC Proo...

Linux Distros Unpatched Vulnerability : CVE-2019-20043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users who do not have the rights to publish a...

Linux Distros Unpatched Vulnerability : CVE-2020-11028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In affected versions of WordPress, some private posts, which were previously public, can result in unauthenticated disclosure under a specific set of conditions...

Linux Distros Unpatched Vulnerability : CVE-2022-4973

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress...

Linux Distros Unpatched Vulnerability : CVE-2020-25286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or...

Linux Distros Unpatched Vulnerability : CVE-2023-5561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of use...

CVE-2025-7775

creationtimestamp| type| source ---|---|--- 2025-08-26 11:58:03+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0268 2025-08-26 12:04:41+00:00| seen| https://www.cert.at/de/warnungen/2025/8/citrix-netscaler-adc-schwachstellen-cve-2025-7775 2025-08-26 12:28:36+00:00| seen|...

CVE-2025-9471

creationtimestamp| type| source ---|---|--- 2025-08-26 04:33:09+00:00| seen| https://bsky.app/profile/potato.software/post/3lxbopoybxi2x 2025-08-26 05:28:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbrtcrejo2v...

CVE-2025-57805

The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2...

CVE-2025-57805 The Scratch Channel's Publish Articles POST Request Can Upload Articles Without Validation

The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2...

CVE-2025-54370

creationtimestamp| type| source ---|---|--- 2025-08-25 17:27:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxajjirf2e2d 2025-08-26 05:09:19+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3lxbqqe4tvs2h 2025-08-29 16:47:32+00:00| seen|...