WordPress WooTumblog plugin <= 2.1.4 - Content Injection vulnerability

Content Injection vulnerability discovered by Mika in WordPress Plugin WooTumblog versions = 2.1.4...

WordPress Botnet Attack Blocker plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Botnet Attack Blocker versions = 2.0.0...

WordPress MediaView plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin MediaView versions = 1.1.2...

WordPress wpForo Forum plugin <= 2.4.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Revan Arifio Patchstack Alliance in WordPress Plugin wpForo Forum versions = 2.4.2...

CVE-2025-31804

creationtimestamp| type| source ---|---|--- 2025-04-01 20:33:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10013...

CVE-2025-21973

creationtimestamp| type| source ---|---|--- 2025-04-01 19:45:19+00:00| published-proof-of-concept| https://t.me/cvedetector/21797...

CVE-2025-31833

creationtimestamp| type| source ---|---|--- 2025-04-01 19:32:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9996...

CVE-2023-24057

creationtimestamp| type| source ---|---|--- 2025-04-01 19:32:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9990...

CVE-2025-31813

creationtimestamp| type| source ---|---|--- 2025-04-01 18:32:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9967...

CVE-2025-31839

creationtimestamp| type| source ---|---|--- 2025-04-01 18:32:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9964...

WordPress Material Dashboard plugin <= 1.4.5 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin Material Dashboard versions = 1.4.5...

CVE-2025-30607

creationtimestamp| type| source ---|---|--- 2025-04-01 16:32:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9938...

WordPress Countdown & Clock plugin <=2.8.8 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by astra.r3verii in WordPress Plugin Countdown & Clock versions = 2.8.8...

WordPress Hyperlink Group Block plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Hyperlink Group Block versions = 2.0.1...

WordPress Norse Rune Oracle Plugin plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Norse Rune Oracle Plugin versions = 1.4.3...

WordPress Directorist AddonsKit for Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Yusuf in WordPress Plugin Directorist AddonsKit for Elementor versions = 1.1.6...

WordPress Nova Blocks by Pixelgrade plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Nova Blocks versions = 2.1.8...

WordPress Ship Per Product plugin <= 2.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Ship Per Product versions = 2.1.0...

WordPress Boo Recipes plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Boo Recipes versions = 2.4.1...

WordPress News, Magazine and Blog Elements Plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin News, Magazine and Blog Elements versions = 1.3...