CVE-2024-13824

creationtimestamp| type| source ---|---|--- 2025-03-14 07:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkd4agt2de2u 2025-03-14 07:48:37+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114159682521234713 2025-03-14 09:45:46+00:00| seen|...

CVE-2024-13407

CVE-2024-13407 (Omnipress WordPress plugin) affects Omnipress plugin versions up to and including 1.5.4. The vulnerability is information exposure via the megamenu block, caused by insufficient restrictions on which posts can be included. An authenticated attacker with Contributor level access or...

CVE-2025-1734

creationtimestamp| type| source ---|---|--- 2025-03-14 06:25:41+00:00| seen| https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27 2025-03-14 18:23:04+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pvarj26 2025-03-17 12:32:28+00:00| seen|...

CVE-2025-1861

creationtimestamp| type| source ---|---|--- 2025-03-14 06:25:41+00:00| seen| https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27 2025-03-14 18:23:03+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pp6o62d 2025-03-18 07:25:13+00:00| seen|...

CVE-2025-1217

creationtimestamp| type| source ---|---|--- 2025-03-14 06:25:41+00:00| seen| https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27 2025-03-17 12:32:28+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lkl5xmdc4s2p 2025-03-18 07:25:12+00:00| seen|...

CVE-2025-1736

creationtimestamp| type| source ---|---|--- 2025-03-14 06:25:41+00:00| seen| https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27 2025-03-14 18:23:03+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pp6o62d 2025-03-18 07:25:13+00:00| seen|...

CVE-2024-11284

creationtimestamp| type| source ---|---|--- 2025-03-14 04:53:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7526 2025-03-14 05:40:18+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkcvjuanhc2n 2025-03-14 05:48:25+00:00| seen|...

WordPress plugin Omnipress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2025-28905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chaser324 Featured Posts Grid featured-posts-grid allows Stored XSS.This issue affects Featured Posts Grid: from n/a through = 1.7...

CVE-2025-22954

creationtimestamp| type| source ---|---|--- 2025-03-13 03:44:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7392 2025-03-13 05:48:24+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114153547594880534 2025-03-17 07:43:58+00:00| seen|...

CVE-2025-25292

creationtimestamp| type| source ---|---|--- 2025-03-12 20:07:18+00:00| seen| https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/ 2025-03-12 21:40:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7388 2025-03-13...

CVE-2025-20146

creationtimestamp| type| source ---|---|--- 2025-03-12 16:41:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7341 2025-03-12 17:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114150716991392661 2025-03-12 20:23:04+00:00| seen| https://t.me/cvedetector/20154 2025-03-...

CVE-2025-24801

creationtimestamp| type| source ---|---|--- 2025-03-12 10:58:14+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lk6geieskt2j 2025-03-12 11:30:36+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lk6i6evc3a2c 2025-03-12 12:09:32+00:00| seen|...

CVE-2024-13430

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.8 via the 'pagelayerbuilderpostsshortcode' function due to insufficient restrictions on which posts can be included. This makes it...

CVE-2024-13430

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.8 via the 'pagelayerbuilderpostsshortcode' function due to insufficient restrictions on which posts can be included. This makes it...

CVE-2024-13430 Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.8 via the 'pagelayerbuilderpostsshortcode' function due to insufficient restrictions on which posts can be included. This makes it...

WordPress PageLayer plugin <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode vulnerability

Authenticated Contributor+ Private Post Disclosure in pagelayerbuilderpostsshortcode vulnerability discovered by Nishiv in WordPress Plugin PageLayer versions = 1.9.8...

WordPress Featured Posts Grid plugin <= 1.7 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Featured Posts Grid versions = 1.7...

WordPress List of Posts from each Category plugin for WordPress plugin <= 2.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin List of Posts from each Category plugin for WordPress versions = 2.0...

CVE-2025-28905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chaser324 Featured Posts Grid featured-posts-grid allows Stored XSS.This issue affects Featured Posts Grid: from n/a through = 1.7...