WordPress Eventin plugin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update vulnerability

Missing Authorization to Unauthenticated Payment Status Update vulnerability discovered by wesley wcraft in WordPress Plugin Eventin versions = 4.0.24...

CERTFR-2025-CTI-003

creationtimestamp| type| source ---|---|--- 2025-03-11 11:00:07+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114143448644988715...

CVE-2025-27912

creationtimestamp| type| source ---|---|--- 2025-03-11 08:38:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7120 2025-03-11 09:31:03+00:00| seen| Telegram/VmMuGE7Rb8M0CTKtbBCx8A-ZtXlhfTER7CBMGSEtWA4Slk 2025-03-11 09:48:37+00:00| seen|...

CVE-2024-43057

creationtimestamp| type| source ---|---|--- 2025-03-03 11:12:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114098199144823059 2025-08-18 13:31:24+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3 2025-08-19 02:47:46+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3...

CVE-2024-10581 DirectoryPress Frontend <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update

The DirectoryPress Frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.9. This is due to missing or incorrect nonce validation on the dpfllistingStatusChange function. This makes it possible for unauthenticated attackers to update...

CVE-2025-23748

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bz4l7i22h 2025-02-14 14:23:47+00:00| seen| https://infosec.exchange/users/cve/statuses/114002691828525768...

GHSA-R58Q-66G9-H6G8

creationtimestamp| type| source ---|---|--- 2025-02-13 15:23:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113997265751139169 2025-02-13 17:15:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4289...

CVE-2024-41166

creationtimestamp| type| source ---|---|--- 2025-02-12 22:18:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7d3d4ad2c 2025-02-12 23:12:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4171 2025-02-13 00:43:19+00:00| seen|...

CVE-2024-39779

creationtimestamp| type| source ---|---|--- 2025-02-12 22:18:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7cp6n7v2h 2025-02-13 00:28:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113993744244373102 2025-08-26 13:26:33+00:00| seen|...

CVE-2024-37020

creationtimestamp| type| source ---|---|--- 2025-02-12 22:17:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7bnwmfq2z 2025-02-12 23:28:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113993508087125822...

CVE-2024-36274

creationtimestamp| type| source ---|---|--- 2025-02-12 22:17:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7b5b35y2z 2025-02-12 23:13:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113993449011313632 2025-08-26 13:26:33+00:00| seen|...

GHSA-593F-38F6-JP5M

creationtimestamp| type| source ---|---|--- 2025-02-12 18:08:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113992250696737741...

CVE-2025-26365

creationtimestamp| type| source ---|---|--- 2025-02-12 15:35:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113991650909763601 2025-02-12 15:37:04+00:00| seen| Telegram/-xvFghkm9wAI3OH5CI2F-m8akBasfMJYjd3uJLYtuPd0nF4 2025-02-12 16:02:48+00:00| seen| https://t.me/cvedetector/17873...

CVE-2025-21124

creationtimestamp| type| source ---|---|--- 2025-02-11 17:12:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113986367860035531 2025-02-11 17:16:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5yyofln2h 2025-02-11 19:52:54+00:00| seen|...

GHSA-PW7M-P9Q7-357P

creationtimestamp| type| source ---|---|--- 2025-02-10 22:15:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113981896093771933...

GHSA-37WC-H8XC-5HC4

creationtimestamp| type| source ---|---|--- 2025-02-10 17:41:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113980818586300320...

GHSA-WVR3-C9X3-9MFF

creationtimestamp| type| source ---|---|--- 2025-02-10 15:44:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113980358279860347...

CVE-2022-26389

creationtimestamp| type| source ---|---|--- 2025-02-07 17:10:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113963709712812927 2025-02-07 19:03:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3807 2025-02-07 20:30:48+00:00| seen| https://t.me/cvedetector/17513...

CVE-2024-52881

creationtimestamp| type| source ---|---|--- 2025-02-07 15:51:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113963399038614634 2025-02-07 18:50:18+00:00| seen| https://t.me/cvedetector/17501 2025-02-07 19:04:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3818...

GHSA-C7W4-9WV8-7X7C

creationtimestamp| type| source ---|---|--- 2025-02-06 18:43:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113958415500125710 2025-02-06 21:00:33+00:00| published-proof-of-concept| Telegram/62ADuuFkUh-GLH8SzGnVJ77GwT3veDkQ-knb1-PeB1sA 2025-02-07 18:03:02+00:00|...