WordPress Yada Wiki plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Yada Wiki versions = 3.5...

RUSTSEC-2025-0152 `finch_cli_rust` was removed from crates.io for malicious code

This attempts to typosquat the existing crate finchcli to steal credentials from local files. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 18 times. There were no crates depending on this crate on crates.io. Thanks to Matthias Zepper of NGI Sweden for reportin...

CVE-2025-59289

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-24 06:24:42+00:00| seen|...

CVE-2025-57202

creationtimestamp| type| source ---|---|--- 2025-10-13 13:14:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/55311...

CVE-2017-5941

creationtimestamp| type| source ---|---|--- 2025-10-12 15:00:06+00:00| published-proof-of-concept| Telegram/nHH3EPNLC7cR6YqxoW514LvTLwhWMDWIdjARrLyJXH8zbM...

CVE-2025-10644

creationtimestamp| type| source ---|---|--- 2025-09-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-896/ 2025-09-18 01:32:06+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lz37d3ud7l2o...

CVE-2025-9845

creationtimestamp| type| source ---|---|--- 2025-09-03 03:28:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvosnzzdf27...

WordPress Sala Theme <= 1.1.6 is vulnerable to Local File Inclusion

Software Sala Type Theme Vulnerable versions = 1.1.6 Fixed in 1.1.7 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-54709 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 734caf3a58cf Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Link View plugin <= 0.8.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan Patchstack Alliance in WordPress Plugin Link View versions = 0.8.0...

WordPress Markup Markdown plugin <= 3.20.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by JeonKim in WordPress Plugin Markup Markdown versions = 3.20.6...

CVE-2024-49959

creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07 2026-02-06 13:45:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me6zzvrufd2z...

CVE-2025-29556

creationtimestamp| type| source ---|---|--- 2025-08-01 03:00:09+00:00| published-proof-of-concept| Telegram/y7-RpDrmSuXhLcSTuW0R9s09Quezx-GrdrSmzgmffhhoeQ...

CVE-2025-51411

creationtimestamp| type| source ---|---|--- 2025-07-25 09:00:04+00:00| published-proof-of-concept| Telegram/jNcdIPPUFRbETtfhaleVicpZBJRzPRjgUorR0kd4jL9lPcM...

GHSA-X97G-H2VP-G2C5

creationtimestamp| type| source ---|---|--- 2025-07-01 02:07:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19997...

GHSA-RC4F-42XM-HVJW

creationtimestamp| type| source ---|---|--- 2025-06-30 19:28:14+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/18657...

CVE-2025-49290

creationtimestamp| type| source ---|---|--- 2025-06-27 14:51:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19727...

CVE-2025-49321

creationtimestamp| type| source ---|---|--- 2025-06-27 14:51:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19726...

CVE-2025-24774

creationtimestamp| type| source ---|---|--- 2025-06-27 13:50:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19716...

CVE-2025-51046

creationtimestamp| type| source ---|---|--- 2025-06-25 17:46:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/41877 2025-06-25 21:00:04+00:00| published-proof-of-concept| Telegram/INbhvu6suw58y9HrUal3GQ-Sx3WcR9t4iYviK9OyeuUsQE...

GHSA-W8JV-RG3H-FC68

creationtimestamp| type| source ---|---|--- 2025-06-25 16:47:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19475...