Lucene search
+L

88289 matches found

NVD
NVD
•added 2025/06/13 3:15 a.m.•22 views

CVE-2025-5939

The Telegram for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions...

4.4CVSS0.00227EPSS
SaveExploits0References2
Circl
Circl
•added 2025/06/13 2:34 a.m.•19 views

CVE-2025-4585

creationtimestamp| type| source ---|---|--- 2025-06-13 02:34:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18256...

6.4CVSS4.8AI score0.00246EPSS
SaveExploits0References1
Circl
Circl
•added 2025/06/13 2:34 a.m.•21 views

CVE-2025-4584

creationtimestamp| type| source ---|---|--- 2025-06-13 02:34:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18254...

6.4CVSS4.8AI score0.00246EPSS
SaveExploits0References1
Circl
Circl
•added 2025/06/13 2:34 a.m.•16 views

CVE-2025-4586

creationtimestamp| type| source ---|---|--- 2025-06-13 02:34:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18248...

6.4CVSS4.8AI score0.00246EPSS
SaveExploits0References1
Circl
Circl
•added 2025/06/13 2:33 a.m.•22 views

CVE-2025-5123

creationtimestamp| type| source ---|---|--- 2025-06-13 02:33:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18246...

6.4CVSS4.8AI score0.00246EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/13 1:47 a.m.•7 views

CVE-2025-5939 Telegram for WP <= 1.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Telegram for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions...

4.4CVSS5.9AI score0.00227EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/06/13 1:47 a.m.•30 views

CVE-2025-5939 Telegram for WP <= 1.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Telegram for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions...

4.4CVSS0.00227EPSS
SaveExploits0References2
CVE
CVE
•added 2025/06/13 1:47 a.m.•525 views

CVE-2025-5939

The Telegram for WP WordPress plugin is affected by a Stored Cross-Site Scripting (XSS) vulnerability in admin settings, present in all versions up to and including 1.6.1. The issue stems from insufficient input sanitization and output escaping, enabling an attacker with administrator-level permi...

4.4CVSS4.3AI score0.00227EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/06/13 12:00 a.m.•17 views

WordPress plugin Telegram for WP cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

4.4CVSS4.5AI score0.00227EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/06/13 12:00 a.m.•16 views

PT-2025-25380 · WordPress · Telegram For Wp

Name of the Vulnerable Software and Affected Versions: Telegram for WP plugin for WordPress versions up to, and including, 1.6.1 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticate...

4.4CVSS4.4AI score0.00227EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/13 12:00 a.m.•6 views

CVE-2025-5939: Improper Neutralization of Input During Web Page Generation

The Telegram for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions...

4.4CVSS5.9AI score0.00227EPSS
SaveExploits0References1
Circl
Circl
•added 2025/06/12 7:33 p.m.•14 views

GHSA-4C2H-67QQ-VM87

creationtimestamp| type| source ---|---|--- 2025-06-12 19:33:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18221 2025-06-12 19:34:31+00:00| seen| Telegram/pmCQczjONs0GfJ4fUtzY9Rs7uNvrLwRQOu1OBXvD7CpRkk...

4.8AI score
SaveExploits0References1
Circl
Circl
•added 2025/06/12 7:33 p.m.•11 views

GHSA-JWR7-992G-68MH

creationtimestamp| type| source ---|---|--- 2025-06-12 19:33:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18220 2025-06-12 19:34:25+00:00| published-proof-of-concept| Telegram/M9-i1Qbwyyn770GCmB3fqZ1mKxD49UUhLWasJxz0nGyZyTc...

4.8AI score
SaveExploits0References1
Circl
Circl
•added 2025/06/12 7:33 p.m.•11 views

GHSA-86XF-2MGP-GV3G

creationtimestamp| type| source ---|---|--- 2025-06-12 19:33:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18218 2025-06-12 19:34:31+00:00| seen| Telegram/pmCQczjONs0GfJ4fUtzY9Rs7uNvrLwRQOu1OBXvD7CpRkk...

4.8AI score
SaveExploits0References1
Circl
Circl
•added 2025/06/12 5:35 p.m.•15 views

CVE-2023-45256

creationtimestamp| type| source ---|---|--- 2025-06-12 17:35:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18211...

5.4CVSS4.8AI score0.00255EPSS
SaveExploits0References1
Circl
Circl
•added 2025/06/12 5:35 p.m.•17 views

CVE-2025-49081

creationtimestamp| type| source ---|---|--- 2025-06-12 17:35:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18202 2025-06-12 18:31:34+00:00| seen| Telegram/8shVKxKTpgJppwgqoSP5CMMCpmIT9d2sZKGL6M7b5sBVNGc...

6.9CVSS4.8AI score0.00481EPSS
SaveExploits0References1
Circl
Circl
•added 2025/06/12 5:35 p.m.•20 views

CVE-2025-5982

creationtimestamp| type| source ---|---|--- 2025-06-12 17:35:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18201...

7.5CVSS4.8AI score0.00312EPSS
SaveExploits0References1
Circl
Circl
•added 2025/06/12 3:34 p.m.•20 views

CVE-2025-49196

creationtimestamp| type| source ---|---|--- 2025-06-12 15:34:18+00:00| seen| Telegram/wgoTb5XaYjt4edW9eGqUUS797b0TcQmpar0c1bJk2kSM 2025-06-13 06:36:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18264...

9.1CVSS4.8AI score0.00258EPSS
SaveExploits0References1
Circl
Circl
•added 2025/06/12 3:34 p.m.•17 views

CVE-2025-49197

creationtimestamp| type| source ---|---|--- 2025-06-12 15:34:18+00:00| seen| Telegram/wgoTb5XaYjt4edW9eGqUUS797b0TcQmpar0c1bJk2kSM 2025-06-17 19:39:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18659...

7.5CVSS4.8AI score0.00307EPSS
SaveExploits0References1
Circl
Circl
•added 2025/06/12 3:34 p.m.•19 views

CVE-2023-20261

creationtimestamp| type| source ---|---|--- 2025-06-12 15:34:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18191...

6.5CVSS6.3AI score0.00708EPSS
SaveExploits0References1
Rows per page
Query Builder