Wordfence Intelligence Weekly WordPress Vulnerability Report (April 14, 2025 to April 20, 2025)

In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. Last week, there were 259 vulnerabilities disclosed in 222 WordPress...

cosmetr.com Cross Site Scripting vulnerability OBB-4049105

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

159 CVEs Exploited in Q1 2025 — 28.3% Within 24 Hours of Disclosure

As many as 159 CVE identifiers have been flagged as exploited in the wild in the first quarter of 2025, up from 151 in Q4 2024. "We continue to see vulnerabilities being exploited at a fast pace with 28.3% of vulnerabilities being exploited within 1-day of their CVE disclosure," VulnCheck said in...

CVE-2025-27820

creationtimestamp| type| source ---|---|--- 2025-04-24 12:06:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13216 2025-04-24 13:09:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114393098223959645 2025-04-24 14:16:47+00:00| seen|...

mikejonesdui.com Cross Site Scripting vulnerability OBB-4049088

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-3300

creationtimestamp| type| source ---|---|--- 2025-04-24 09:12:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13201 2025-04-24 13:03:42+00:00| seen| https://t.me/cvedetector/23658 2025-04-24 14:19:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkvntgnrw2d 2026-04-08...

meadowlands-river-inn.us-newyorkcity.com Cross Site Scripting vulnerability OBB-4049003

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mcgesund.de Cross Site Scripting vulnerability OBB-4048994

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

BELL-CVE-2025-21605

Bulletin has no description...

CVE-2025-3500

creationtimestamp| type| source ---|---|--- 2025-04-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-256/ 2025-04-25 05:05:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114396856500034471 2025-12-01 16:37:28+00:00| seen|...

CVE-2024-38541

creationtimestamp| type| source ---|---|--- 2025-04-24 02:01:18+00:00| seen| https://gist.github.com/somprasongd/7e70d4aeffa65e3b65b61db9baeb480f 2025-05-09 08:25:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15707...

PT-2025-18080 · Dell · Dell Powerprotect Data Manager Reporting

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager Reporting versions 19.17 through 19.18 Description: The issue is related to improper encoding or escaping of output, which could be exploited by an attacker with high privileges and local access to inject...

CVE-2025-46397

creationtimestamp| type| source ---|---|--- 2025-04-23 21:05:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13154 2025-04-24 00:02:03+00:00| published-proof-of-concept| Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0 2025-04-24 00:31:13+00:00| seen| https://t.me/cvedetector/23620...

CVE-2025-46398

creationtimestamp| type| source ---|---|--- 2025-04-23 21:05:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13153 2025-04-24 00:02:03+00:00| published-proof-of-concept| Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0 2025-04-24 00:31:14+00:00| seen| https://t.me/cvedetector/23621...

measurepress.com Cross Site Scripting vulnerability OBB-4048847

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-J6F8-WH4V-JC37

creationtimestamp| type| source ---|---|--- 2025-04-23 18:05:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13096...

manuall.cz Cross Site Scripting vulnerability OBB-4048836

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2025-3425 Malicious code in va-report-components (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in va-report-components (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-42601

creationtimestamp| type| source ---|---|--- 2025-04-23 11:20:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13019 2025-04-23 13:15:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnibm3pvzb2h 2025-04-23 14:28:54+00:00| seen| https://t.me/cvedetector/23586...