WordPress Page View Count plugin 2.8.0-2.8.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

Missing Authorization to Authenticated Subscriber+ Limited Options Update vulnerability discovered by kr0d in WordPress Plugin Page View Count versions 2.8.0-2.8.4...

LVDA 2402 | Ubuntu VDAs taking a long time (2-3min) to login

Customer is experiencing unusual slow logon when launching a published desktop hosted on Ubuntu It typically takes about 2 to 3 minutes to login...

WordPress tagDiv Opt-In Builder plugin <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter vulnerability

Authenticated Subscriber+ SQL Injection via subscriptionCouponId Parameter vulnerability discovered by Truoc Phan in WordPress Plugin tagDiv Opt-In Builder versions = 1.7...

WordPress WP Statistics plugin <= 14.13.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary plugin Settings Update vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary plugin Settings Update vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Statistics versions = 14.13.3...

CVE-2022-45914

creationtimestamp| type| source ---|---|--- 2025-04-29 14:11:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13815...

GHSA-WMJQ-JRM2-9WFR

creationtimestamp| type| source ---|---|--- 2025-04-28 23:10:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13750...

Microsoft Edge browser closes unexpectedly inside Published Desktop when using FIDO2 Authentication

FIDO2 Redirection is enabled to authenticate web application inside Published Desktop. MSedge browser closes unexpectedly at the web application authentication page, no error message on the desktop nor in the Windows event log. This issue only occurs with MSedge. No issue with Chrome or Firefox...

WordPress Element Pack Elementor Addons plugin <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Element Pack Elementor Addons versions = 5.10.29...

CVE-2020-23585

creationtimestamp| type| source ---|---|--- 2025-04-25 21:08:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13545...

CVE-2022-0137

creationtimestamp| type| source ---|---|--- 2025-04-25 20:08:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13522...

CVE-2025-32788

creationtimestamp| type| source ---|---|--- 2025-04-25 16:07:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13456...

CVE-2025-39385

creationtimestamp| type| source ---|---|--- 2025-04-25 14:07:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13423...

WordPress iCafe Library plugin <= 1.8.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by 0x1ceKing Patchstack Alliance in WordPress Plugin iCafe Library versions = 1.8.3...

WordPress Mayosis Core plugin <= 5.4.1 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Tonn in WordPress Plugin Mayosis Core versions = 5.4.1...

CVE-2022-44277

creationtimestamp| type| source ---|---|--- 2025-04-24 21:07:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13357...

CVE-2025-46483

creationtimestamp| type| source ---|---|--- 2025-04-24 20:06:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13333...

WordPress Social Counter plugin <= 2.0.5 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Social Counter versions = 2.0.5...

WordPress WP Custom Post Popup plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by johska in WordPress Plugin WP Custom Post Popup versions = 1.0.1...

CVE-2025-46473

creationtimestamp| type| source ---|---|--- 2025-04-24 17:06:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13287...

Published Desktop Randomly Disconnects with Event ID 1 - ICA Client (Vanadium)

Users running on thin clients using the maximum supported monitors for the device, each at at the maximum supported resolution, may be disconnect from the Published Desktop at random.At the time of the disconnect the endpoint device event log records: Event ID 1 from source ICA Client Vanadium wi...