CVE-2025-14468

creationtimestamp| type| source ---|---|--- 2026-01-07 08:29:05+00:00| seen| https://gist.github.com/Darkcrai86/73423170bc11519fd3886e82bfa13ff4...

CVE-2025-13521 WP Status Notifier <= 1.0 - Cross-Site Request Forgery to Settings Update

The WP Status Notifier plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin...

CVE-2025-13521

WP Status Notifier is vulnerable to CSRF due to missing/incorrect nonce validation on the settings update function, enabling unauthenticated attackers to change plugin settings by decep­tively prompting an admin (e.g., via forged link). The CVE entry lists a CVSS v3.1 base score of 4.3 (Medium) w...

CVE-2025-15224

creationtimestamp| type| source ---|---|--- 2026-01-07 07:01:33+00:00| seen| https://seclists.org/oss-sec/2026/q1/36 2026-01-07 07:51:28+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/115852724607348302 2026-01-07 08:43:27+00:00| seen|...

kernel: smb: client: fix potential UAF in cifs_stats_proc_write()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsstatsprocwrite Skip sessions that are being teared down status == SESEXITING to avoid UAF...

PT-2026-1636

Name of the Vulnerable Software and Affected Versions Piraeus Bank WooCommerce Payment Gateway plugin for WordPress versions through 3.1.4 Description The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is susceptible to unauthorized modification of order statuses. This is a result ...

PT-2026-1593

Name of the Vulnerable Software and Affected Versions WP Status Notifier plugin for WordPress versions prior to 1.1 Description The WP Status Notifier plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF. This is caused by insufficient or incorrect nonce validation when updating...

WordPress plugin WP Status Notifier 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2026-2206

Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description An attacker with a network connection could detect credentials in clear text. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

WordPress plugin Piraeus Bank WooCommerce Payment Gateway 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPre...

WordPress WP Status Notifier plugin <= 1.0 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin WP Status Notifier versions = 1.0...

CVE-2025-15471

creationtimestamp| type| source ---|---|--- 2026-01-06 21:54:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115850377807051367 2026-01-07 02:04:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbsev2vuft2u 2026-01-07 03:01:30+00:00| seen|...

GHSA-3573-4C68-G8CC

creationtimestamp| type| source ---|---|--- 2026-01-06 21:42:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115850329862818826 2026-01-24 21:30:42+00:00| seen| https://gist.github.com/alon710/0353b77d527ce0d878ab26e70dd7a91d 2026-01-24 21:30:43+00:00| seen|...

GHSA-4PV4-4X2X-6J88

creationtimestamp| type| source ---|---|--- 2026-01-06 20:13:41+00:00| seen| Telegram/W9cnrPaYEkduQXNMxTamq0Dafu5VRSzGfTVZkSYwQLJrcs...

GHSA-9Q9C-699Q-XR2Q

creationtimestamp| type| source ---|---|--- 2026-01-06 20:13:41+00:00| seen| Telegram/W9cnrPaYEkduQXNMxTamq0Dafu5VRSzGfTVZkSYwQLJrcs...

GHSA-GG4X-FGG2-H9W9

creationtimestamp| type| source ---|---|--- 2026-01-06 19:51:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115849892053733021 2026-01-24 21:30:31+00:00| seen| https://gist.github.com/alon710/ecdbc01c3c96ce665a77ba8b31b2fc40 2026-01-24 21:30:33+00:00| seen|...

CVE-2026-0641

creationtimestamp| type| source ---|---|--- 2026-01-06 19:32:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115849820059269521 2026-01-06 20:13:33+00:00| seen| Telegram/IDZM-U-kLaMeLOHSZRXTD9u0IyoQQmgHJLI16VuZIVt-ROU 2026-01-06 21:27:15+00:00| seen|...

CVE-2020-36916

creationtimestamp| type| source ---|---|--- 2026-01-06 16:10:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115849026353201544 2026-01-06 17:28:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbri2npaq62g 2026-01-07 21:03:10+00:00| seen|...

CVE-2020-36921

creationtimestamp| type| source ---|---|--- 2026-01-06 16:10:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115849026353201544 2026-01-06 16:43:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbrfksagyp2q 2026-01-07 21:03:13+00:00| seen|...

CVE-2020-36925

creationtimestamp| type| source ---|---|--- 2026-01-06 16:10:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115849026353201544 2026-01-06 16:55:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbrg7iz3py2m 2026-01-07 21:03:15+00:00| seen|...