CVE-2024-13855

The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.1 via the paeglobalblock shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2025-0728

creationtimestamp| type| source ---|---|--- 2025-02-21 11:25:05+00:00| seen| https://t.me/cvedetector/18637 2025-02-21 11:26:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liop3rgr4g2p 2025-02-21 12:35:18+00:00| seen| Telegram/JmZL6HfJEWDyKx7kicaSOJ8gP19bpGfV75hu0-viSdkUO978...

WordPress WP Video Posts plugin <= 3.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin WP Video Posts versions = 3.5.1...

CVE-2025-24893

creationtimestamp| type| source ---|---|--- 2025-02-20 20:56:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lin6hwckvn2a 2025-02-20 21:48:44+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114038415303555460 2025-02-20 23:12:05+00:00| published-proof-of-concept...

CVE-2024-13753

creationtimestamp| type| source ---|---|--- 2025-02-20 11:49:32+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114036057912346467 2025-02-20 12:41:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3limctgdc5x2y 2025-02-20 13:09:02+00:00| seen|...

CVE-2024-13855

The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.1 via the paeglobalblock shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2024-13855 Prime Addons for Elementor <= 2.0.1 - Authenticated (Contributor+) Insecure Direct Object Reference via pae_global_block Shortcode

The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.1 via the paeglobalblock shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2025-27218

creationtimestamp| type| source ---|---|--- 2025-02-20 06:41:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lilooxkrnx2a 2025-02-20 08:07:57+00:00| seen| https://t.me/cvedetector/18517 2025-02-20 23:26:54+00:00| seen| Telegram/bIWqiOjr1i5Jv8o-lCPyoqx7UdJEMKQ-dr8MIYLvX8SvXV-l...

CVE-2025-1272

creationtimestamp| type| source ---|---|--- 2025-02-20 04:08:28+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lilg56uo7k2l 2025-02-20 05:02:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lilj6omphm2o 2025-02-20 08:20:08+00:00| seen|...

CVE-2024-6697

creationtimestamp| type| source ---|---|--- 2025-02-20 01:31:01+00:00| seen| https://bsky.app/profile/will.willofmiletus.com/post/3lil5dsp5qs2d 2025-02-20 02:16:29+00:00| seen| https://t.me/cvedetector/18486 2025-02-20 02:47:11+00:00| seen|...

CVE-2025-27092

creationtimestamp| type| source ---|---|--- 2025-02-20 00:07:11+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/12948 2025-02-20 01:25:14+00:00| seen| https://bsky.app/profile/will.willofmiletus.com/post/3lil4zhtabk2d 2025-02-20 02:16:43+00:00| seen|...

WordPress plugin Prime Addons for Elementor 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An Access Control...

CVE-2025-24989

creationtimestamp| type| source ---|---|--- 2025-02-19 22:21:30+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3liksqx4pw62m 2025-02-20 01:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114033695623711760 2025-02-20 02:16:44+00:00| seen|...

CVE-2023-46271

creationtimestamp| type| source ---|---|--- 2025-02-19 22:05:44+00:00| seen| https://t.me/cvedetector/18475 2025-02-19 22:06:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likrwsvmhs2y 2025-02-20 17:48:24+00:00| seen|...

CVE-2025-0968

creationtimestamp| type| source ---|---|--- 2025-02-19 12:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqwd7tpr2o 2025-02-19 14:16:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnk7gy62c 2025-02-19 16:14:08+00:00| seen|...

CVE-2024-13491

creationtimestamp| type| source ---|---|--- 2025-02-19 12:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqw2hy5m2h 2025-02-19 14:16:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnkcpj22m 2025-02-19 16:14:02+00:00| seen|...

CVE-2024-13483

creationtimestamp| type| source ---|---|--- 2025-02-19 12:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqvvfth52p 2025-02-19 14:16:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnkx6522v 2025-02-19 16:14:10+00:00| seen|...

CVE-2024-13479

creationtimestamp| type| source ---|---|--- 2025-02-19 12:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqvr23qc2k 2025-02-19 14:16:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnjvfrl22 2025-02-19 16:14:11+00:00| seen|...

CVE-2024-13489

creationtimestamp| type| source ---|---|--- 2025-02-19 10:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijk6qpfzh2h 2025-02-19 13:43:40+00:00| seen| https://t.me/cvedetector/18434 2025-02-19 14:16:29+00:00| seen|...

CVE-2024-13719

creationtimestamp| type| source ---|---|--- 2025-02-19 08:16:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdknorun2g 2025-02-19 08:41:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4797 2025-02-19 12:01:16+00:00| seen|...