WordPress Premium Addons for Elementor plugin <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Countdown Widget vulnerability discovered by Asaf Mozes in WordPress Plugin Premium Addons for Elementor versions = 4.11.8...

WordPress Ruza Theme <= 1.0.7 is vulnerable to Local File Inclusion

Software Ruza Type Theme Vulnerable versions = 1.0.7 Fixed in 1.0.8 OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2025-49255 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 6bd5103cfe41 Credits Phat RiO - BlueRock Required privilege...

WordPress Zota Theme <= 1.3.8 is vulnerable to Local File Inclusion

Software Zota Type Theme Vulnerable versions = 1.3.8 Fixed in 1.3.9 OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2025-49257 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 511b31ea918b Credits Phat RiO - BlueRock Required privilege...

WordPress Aora Theme <= 1.3.9 is vulnerable to Local File Inclusion

Software Aora Type Theme Vulnerable versions = 1.3.9 Fixed in 1.3.10 OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2025-49260 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID c279fefa752d Credits Phat RiO - BlueRock Required privilege...

CVE-2025-5977

creationtimestamp| type| source ---|---|--- 2025-06-10 20:31:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17987...

GHSA-WJW6-95H5-4JPX

creationtimestamp| type| source ---|---|--- 2025-06-10 17:32:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17940...

CVE-2025-471737

creationtimestamp| type| source ---|---|--- 2025-06-10 16:45:25+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0189...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in several products such as RUGGEDCOM, SCALANCE, SIMATIC and Tecnomatix The vulnerabilities potentially enable a malicious person to carry out attacks that could lead to the following categories of damage: - Denial-of-Service DoS - Manipulation of data -...

CVE-2025-5913

creationtimestamp| type| source ---|---|--- 2025-06-10 04:29:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17826 2025-06-10 04:31:27+00:00| published-proof-of-concept| Telegram/SuCuNuYYG7YH6LF-PMvjYx2GIDz9A5wanFKy4pWUO100XY8...

CVE-2025-49282

creationtimestamp| type| source ---|---|--- 2025-06-09 20:31:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17776...

CVE-2025-24768

creationtimestamp| type| source ---|---|--- 2025-06-09 16:56:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17720...

CVE-2025-5886

creationtimestamp| type| source ---|---|--- 2025-06-09 16:56:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17712...

CVE-2025-49013

creationtimestamp| type| source ---|---|--- 2025-06-09 14:01:05+00:00| published-proof-of-concept| Telegram/wBaWWziweQgkSo7QapMU6ZNqlsB8QnkMAlvPkvlPpTVYk...

GHSA-QVJC-6XV7-6V5F

creationtimestamp| type| source ---|---|--- 2025-06-09 14:01:05+00:00| published-proof-of-concept| Telegram/wBaWWziweQgkSo7QapMU6ZNqlsB8QnkMAlvPkvlPpTVYk...

CVE-2025-5861

creationtimestamp| type| source ---|---|--- 2025-06-09 05:00:31+00:00| published-proof-of-concept| Telegram/qyqnOzVZW18hvD2vZYaappEIs0Lsk4RaTLhiceHhKkxOIwY 2026-08-14 16:00:12+00:00| seen| https://t.me/purpsec/747 2026-08-15 00:00:08+00:00| seen| https://t.me/purpsec/747...

WordPress StageShow plugin <= 10.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via anchor Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via anchor Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin StageShow versions = 10.0.3...

WordPress WordPress Ajax Load More and Infinite Scroll plugin <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via id Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin WordPress Ajax Load More and Infinite Scroll versions = 1.6.0...

WordPress ESV Bible Shortcode for WordPress plugin <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin ESV Bible Shortcode for WordPress versions = 1.0.2...

WordPress BNS Featured Category plugin <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin BNS Featured Category versions = 2.8.2...

WordPress Knowledge Base plugin <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Knowledge Base versions = 2.3.0...