CVE-2024-54387

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jaytesh Barange Posts Date Ranges posts-date-ranges allows Reflected XSS.This issue affects Posts Date Ranges: from n/a through = 2.2...

CVE-2024-54413

Cross-Site Request Forgery CSRF vulnerability in brandt-net Display Future Posts display-future-posts allows Stored XSS.This issue affects Display Future Posts: from n/a through = 0.2.3...

CVE-2024-54427

Cross-Site Request Forgery CSRF vulnerability in ljmacphee Category of Posts list-one-category-of-posts allows Stored XSS.This issue affects Category of Posts: from n/a through = 1.0...

CVE-2024-54403

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in oktoberfive Visual Recent Posts visual-recent-posts allows Reflected XSS.This issue affects Visual Recent Posts: from n/a through = 1.2.3...

CVE-2024-51647

Cross-Site Request Forgery CSRF vulnerability in Chaser324 Featured Posts Scroll allows Stored XSS.This issue affects Featured Posts Scroll: from n/a through 1.25...

CVE-2024-36972

creationtimestamp| type| source ---|---|--- 2025-02-05 03:11:24+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lhflxf7g5222 2025-02-05 05:10:46+00:00| seen| https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lhfsmwsioc2w 2025-02-05 07:54:31+00:00| published-proof-of-concept...

CVE-2025-23114

creationtimestamp| type| source ---|---|--- 2025-02-05 02:01:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113948811901159163 2025-02-05 02:03:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113948819496896713 2025-02-05 02:15:51+00:00| seen|...

CVE-2024-11733

The The WordPress Popular Posts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.1.0. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possib...

CVE-2024-48029

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Hung Trang Si SB Random Posts Widget sb-random-posts-widget allows PHP Local File Inclusion.This issue affects SB Random Posts Widget: from n/a through = 1.0...

CVE-2024-48032

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sumitsurai Featured Posts with Multiple Custom Groups FPMCG featured-posts-with-multiple-custom-groups-fpmcg allows Reflected XSS.This issue affects Featured Posts with Multiple Custom Groups FPMCG...

CVE-2024-53780

Cross-Site Request Forgery CSRF vulnerability in rajeevglocify Load More Posts load-more-posts allows Stored XSS.This issue affects Load More Posts: from n/a through = 1.5.0...

CVE-2024-53730

Cross-Site Request Forgery CSRF vulnerability in springthistle April's Call Posts aprils-call-posts allows Stored XSS.This issue affects April's Call Posts: from n/a through = 2.1.1...

CVE-2024-53994

creationtimestamp| type| source ---|---|--- 2025-02-04 21:20:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113947708468156282 2025-02-04 22:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf3hua6gm2j 2025-02-05 00:45:44+00:00| seen|...

CVE-2025-24971

creationtimestamp| type| source ---|---|--- 2025-02-04 18:57:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113947144108335156 2025-02-04 19:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lherfrzjqf2i 2025-02-04 22:15:20+00:00| seen|...

CVE-2024-57428

creationtimestamp| type| source ---|---|--- 2025-02-04 16:00:09+00:00| published-proof-of-concept| Telegram/Zrldk8z1EwjpYU8Vg3CSH1QFx-z50lEQp2XdvPCkQk6RQ8I 2025-02-06 16:22:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113957861655010492 2025-02-06 17:16:18+00:00| seen|...

CVE-2025-22699

creationtimestamp| type| source ---|---|--- 2025-02-04 15:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhedzdiovf2b 2025-02-04 16:03:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhegmtwewl2l 2025-02-04 16:48:47+00:00| seen|...

CVE-2025-20891

creationtimestamp| type| source ---|---|--- 2025-02-04 08:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmk3qrw42r 2025-02-04 10:32:40+00:00| seen| https://t.me/cvedetector/17168 2025-02-04 12:19:06+00:00| seen|...

CVE-2024-12046

The Medical Addon for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.6.2 via the 'namedicalelementortemplate' shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers,...

CVE-2024-13514 B Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.5 via the 'bsb-slider' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, wi...

CVE-2024-13514

CVE-2024-13514 concerns the WordPress plugin B Slider- Gutenberg Slider Block for WP. The CVE describes Information Exposure via the bsb-slider shortcode, enabling authenticated users with Contributor+ privileges to read private posts. Reported affected versions include up to 1.9.5 (per the CVE r...