CVE-2025-54710

Summary of CVE-2025-54710 (WordPress Tiktok Feed plugin) : A Missing Authorization / broken access control vulnerability affects the WordPress plugin “Tiktok Feed” (versions up to and including 1.0.21). The issue enables an attacker to access functionality that is not properly constrained by ACLs...

PT-2025-35068

Name of the Vulnerable Software and Affected Versions: bPlugins Tiktok Feed versions through 1.0.21 Description: A missing authorization flaw exists in bPlugins Tiktok Feed, allowing access to functionality not properly constrained by Access Control Lists ACLs. Recommendations: Update bPlugins...

WordPress plugin Tiktok Feed 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Tiktok Feed Plugin <= 1.0.21 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Denver Jackson in WordPress Plugin Tiktok Feed versions = 1.0.21...

Study Reveals TikTok, Alibaba, Temu Collect Extensive User Data in America

Incogni finds top foreign apps downloaded in the US harvest names, locations, and emails, sharing them with third parties for ads and profiling...

MAL-2025-6964 Malicious code in tiktok-prod (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in tiktok-prod (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in tiktok-dev (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6963 Malicious code in tiktok-dev (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @tiktok-frontend/api-demo-sample-lib2 (npm)

The package @tiktok-frontend/api-demo-sample-lib2 was found to contain malicious code...

MAL-2025-9564 Malicious code in @tiktok-frontend/app-center-connect (npm)

The package @tiktok-frontend/app-center-connect was found to contain malicious code...

MAL-2025-9563 Malicious code in @tiktok-frontend/api-demo-sample-lib2 (npm)

The package @tiktok-frontend/api-demo-sample-lib2 was found to contain malicious code...

Malicious code in @tiktok-frontend/app-center-connect (npm)

The package @tiktok-frontend/app-center-connect was found to contain malicious code...

MAL-2025-36933 Malicious code in tiktokdl-api (npm)

The package tiktokdl-api was found to contain malicious code...

Malicious code in tiktok-internal (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6860 Malicious code in tiktok-internal (npm)

The package communicates with a domain associated with malicious activity...

15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign

Cybersecurity researchers have lifted the veil on a widespread malicious campaign that's targeting TikTok Shop users globally with an aim to steal credentials and distribute trojanized apps. "Threat actors are exploiting the official in-app e-commerce platform through a dual attack strategy that...

WordPress plugin Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Taiwan NSB Alerts Public on Data Risks from Douyin, Weibo, and RedNote Over China Ties

Taiwan's National Security Bureau NSB has warned that China-developed applications like RedNote aka Xiaohongshu, Weibo, Douyin, WeChat, and Baidu Cloud pose security risks due to excessive data collection and data transfer to China. The alert comes following an inspection of these apps carried ou...

Threat Actor Claims TikTok Breach, Puts 428 Million Records Up for Sale

Alleged TikTok Breach: Threat actor “Often9” claims to sell 428M user records, including emails, phones, and account details on dark web forum. TikTok is investigating!...