CVE-2025-39358 WordPress WP Posts Carousel <= 1.3.12 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through = 1.3.12...

CVE-2025-39358 WordPress WP Posts Carousel <= 1.3.12 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through = 1.3.12...

CVE-2025-39358

CVE-2025-39358 affects WordPress plugin WP Posts Carousel (versions up to and including 1.3.12). The vulnerability is Deserialization of Untrusted Data leading to PHP Object Injection, reported for authenticated contexts (Contributor+). Patchstack and CVE records indicate the issue is fixed in ve...

CVE-2025-5749

creationtimestamp| type| source ---|---|--- 2025-06-06 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-328/ 2025-06-06 17:07:50+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lqxd4fmsis2l 2025-06-06 17:07:52+00:00| seen|...

CVE-2025-5751

creationtimestamp| type| source ---|---|--- 2025-06-06 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-330/ 2025-06-06 17:07:50+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lqxd4fmsis2l 2025-06-06 17:07:52+00:00| seen|...

CVE-2025-39358: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through = 1.3.12...

WordPress Plugin WP Posts Carousel Code Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress plugin Recent Posts Slider Responsive Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-28966: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in dilemma123 Recent Posts Slider Responsive recent-posts-slider-responsive allows Stored XSS.This issue affects Recent Posts Slider Responsive: from n/a through = 1.0.1...

CVE-2025-30974: Missing Authorization

Missing Authorization vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid Master: from n/a through = 3.4.17...

PT-2025-24078 · WordPress · Wp Posts Carousel

Name of the Vulnerable Software and Affected Versions: WP Posts Carousel versions 1.3.12 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in WP Posts Carousel. Recommendations: For WP Posts Carousel versions 1.3.12 and earlier, upda...

CVE-2025-5651

creationtimestamp| type| source ---|---|--- 2025-06-05 11:12:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqu6snmli625 2025-06-05 11:49:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquatikfkhi2...

CVE-2025-5622

creationtimestamp| type| source ---|---|--- 2025-06-05 01:27:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqt64rcwgl2e 2025-06-05 01:44:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114628220983430004...

UBUNTU-CVE-2025-49007

Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.16, there is a denial of service vulnerability in the Content-Disposition parsing component of Rack. This is very similar to the previous security issue CVE-2022-44571. Carefully crafted input can caus...

CVE-2025-5609

creationtimestamp| type| source ---|---|--- 2025-06-04 21:07:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqsplhn5so2q 2025-06-04 21:18:00+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqsq5nk7dyk2...

CVE-2025-48998

creationtimestamp| type| source ---|---|--- 2025-06-03 19:28:38+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpzkiekknm2 2025-06-03 21:14:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqq7inqymq2p...

CVE-2025-30360

creationtimestamp| type| source ---|---|--- 2025-06-03 15:55:19+00:00| published-proof-of-concept| https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-9jgg-88mc-972h 2025-06-03 18:11:11+00:00| seen|...

CVE-2025-47827

creationtimestamp| type| source ---|---|--- 2025-06-02 19:34:29+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/39027 2025-06-05 14:39:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqukdrxqfni2 2025-06-05 14:59:07+00:00...

CVE-2025-20678

creationtimestamp| type| source ---|---|--- 2025-06-02 04:05:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqlvjyvabm62 2025-06-02 04:38:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqlxf3wy3z2k 2025-06-02...

CVE-2025-5403

A vulnerability classified as critical has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This affects an unknown part of the file /admin/viewallposts.php of the component GET Parameter Handler. The manipulation of the argument postid leads to sql injection. ...