CVE-2025-30868

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Maidul Team Manager wp-team-manager allows PHP Local File Inclusion.This issue affects Team Manager: from n/a through = 2.1.23...

SUSE CVE-2025-27715

Mattermost versions 9.11.x = 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private channels via crafted permalink links without explicit consent from them...

SUSE CVE-2025-30179

Mattermost versions 10.4.x = 10.4.2, 10.3.x = 10.3.3, 9.11.x = 9.11.8 fail to enforce MFA on certain search APIs, which allows authenticated attackers to bypass MFA protections via user search, channel search, or team search queries...

Malicious code in team-labeler-action (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2905 Malicious code in team-labeler-action (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-31440

CVE-2025-31440 is a CSRF vulnerability in Strategy11 Terms of Use plugin that allows Stored XSS. Affected software: Terms of Use (Strategy11) plugin up to version 2.0. Reported impact: cross-site request forgery enabling stored XSS in eligible requests. CVSS v3.1 base score 7.1 (HIGH); vectors: A...

BIT-MATTERMOST-2025-27715

Mattermost versions 9.11.x = 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private channels via crafted permalink links without explicit consent from them...

CVE-2025-24381

creationtimestamp| type| source ---|---|--- 2025-03-28 03:27:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9263 2025-03-28 05:00:36+00:00| seen| Telegram/REIy8s9RHKd3lCpUQgU1ZLtNB2gCBYg9aoCqFnV7Mh0QfY 2025-03-28 05:12:10+00:00| seen| https://t.me/cvedetector/21359 2025-03-28 09:05:40+00:0...

CVE-2025-31092

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through = 2.3.4...

CVE-2025-31440: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Strategy11 Team Terms of Use terms-of-use-2 allows Stored XSS.This issue affects Terms of Use: from n/a through = 2.0...

CVE-2025-31092: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through = 2.3.4...

Mattermost Server 9.11.x < 9.11.9 (MMSA-2024-00409)

The version of Mattermost Server installed on the remote host is prior to 9.11.9. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00409 advisory. - Mattermost versions 9.11.x = 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel...

CVE-2025-31092

CVE-2025-31092: Stored XSS in Click to Chat – WP Support All-in-One Floating Widget due to improper input neutralization during web page generation; affected plugin versions up to 2.3.4 (no details on fixes in provided documents).

CVE-2025-30093

creationtimestamp| type| source ---|---|--- 2025-03-27 20:50:26+00:00| seen| https://t.me/cvedetector/21334 2025-03-28 15:28:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9365 2025-03-28 20:49:11+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3llhotwpwb52j...

CVE-2025-30868

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Maidul Team Manager wp-team-manager allows PHP Local File Inclusion.This issue affects Team Manager: from n/a through = 2.1.23...

CVE-2025-30868

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Maidul Team Manager wp-team-manager allows PHP Local File Inclusion.This issue affects Team Manager: from n/a through = 2.1.23...

WordPress Team Manager plugin <= 2.1.23 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin Team Manager versions = 2.1.23...

CVE-2025-30868 WordPress Team Manager plugin <= 2.1.23 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Maidul Team Manager wp-team-manager allows PHP Local File Inclusion.This issue affects Team Manager: from n/a through = 2.1.23...

CVE-2025-30868 WordPress Team Manager plugin <= 2.1.23 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Maidul Team Manager wp-team-manager allows PHP Local File Inclusion.This issue affects Team Manager: from n/a through = 2.1.23...

CVE-2025-30868

CVE-2025-30868 concerns the Team Manager plugin for WordPress. The vulnerability is Local File Inclusion via an improper include/require in a PHP component, leading to potential code exposure or execution. It affects Team Manager up to version 2.1.23 and is exploitable by an authenticated attacke...