CVE-2025-47538

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdever Cart tracking for WooCommerce cart-tracking-for-woocommerce allows SQL Injection.This issue affects Cart tracking for WooCommerce: from n/a through = 1.0.17...

CVE-2025-37880

creationtimestamp| type| source ---|---|--- 2025-05-09 07:25:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15693 2025-05-09 08:31:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lopz7yf3ud2l 2025-05-09 10:21:58+00:00| seen|...

CVE-2025-1330

creationtimestamp| type| source ---|---|--- 2025-05-08 22:25:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15638 2025-05-08 22:55:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114474677389527079 2025-05-08 23:14:40+00:00| seen|...

GHSA-889J-63JV-QHR8

creationtimestamp| type| source ---|---|--- 2025-05-08 18:24:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15578 2025-05-08 19:14:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114473807351732745 2025-05-08 20:30:52+00:00| seen|...

CVE-2025-3476

creationtimestamp| type| source ---|---|--- 2025-05-07 19:22:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15395 2025-05-07 19:54:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114468299910999808 2025-05-07 21:26:00+00:00| seen|...

CVE-2025-47633

Cross-Site Request Forgery CSRF vulnerability in Awin Awin – Advertiser Tracking for WooCommerce allows Cross Site Request Forgery. This issue affects Awin – Advertiser Tracking for WooCommerce: from n/a through 2.0.0...

CVE-2025-47633

Cross-Site Request Forgery CSRF vulnerability in Awin Awin – Advertiser Tracking for WooCommerce awin-advertiser-tracking allows Cross Site Request Forgery.This issue affects Awin – Advertiser Tracking for WooCommerce: from n/a through = 2.0.0...

CVE-2025-47626

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in apasionados Submission DOM tracking for Contact Form 7 cf7-submission-dom-tracking allows Stored XSS.This issue affects Submission DOM tracking for Contact Form 7: from n/a through = 2.1...

CVE-2025-47626

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in apasionados Submission DOM tracking for Contact Form 7 allows Stored XSS. This issue affects Submission DOM tracking for Contact Form 7: from n/a through 2.0...

CVE-2025-47538

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdever Cart tracking for WooCommerce cart-tracking-for-woocommerce allows SQL Injection.This issue affects Cart tracking for WooCommerce: from n/a through = 1.0.17...

CVE-2025-47538

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdever Cart tracking for WooCommerce allows SQL Injection. This issue affects Cart tracking for WooCommerce: from n/a through 1.0.17...

CVE-2025-47633 WordPress Awin – Advertiser Tracking for WooCommerce plugin <= 2.0.0 - CSRF to Product Feed Regeneration vulnerability

Cross-Site Request Forgery CSRF vulnerability in Awin Awin – Advertiser Tracking for WooCommerce awin-advertiser-tracking allows Cross Site Request Forgery.This issue affects Awin – Advertiser Tracking for WooCommerce: from n/a through = 2.0.0...

CVE-2025-47626

CVE-2025-47626 documents a Stored XSS in the WordPress plugin Submission DOM tracking for Contact Form 7. The available connected sources note the issue as Cross Site Scripting due to improper input neutralization during web page generation, affecting Submission DOM tracking for Contact Form 7 ve...

CVE-2025-47626 WordPress Submission DOM tracking for Contact Form 7 plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in apasionados Submission DOM tracking for Contact Form 7 cf7-submission-dom-tracking allows Stored XSS.This issue affects Submission DOM tracking for Contact Form 7: from n/a through = 2.1...

CVE-2025-47538 WordPress Cart tracking for WooCommerce plugin <= 1.0.17 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdever Cart tracking for WooCommerce cart-tracking-for-woocommerce allows SQL Injection.This issue affects Cart tracking for WooCommerce: from n/a through = 1.0.17...

CVE-2025-47538 WordPress Cart tracking for WooCommerce <= 1.0.17 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdever Cart tracking for WooCommerce allows SQL Injection. This issue affects Cart tracking for WooCommerce: from n/a through 1.0.17...

CVE-2025-47538

CVE-2025-47538 concerns the WordPress plugin Cart tracking for WooCommerce (versions up to 1.0.17). The issue is an SQL Injection caused by improper neutralization of special elements in SQL commands within that plugin. The vulnerability affects Cart tracking for WooCommerce versions 1.0.0 throug...

CVE-2025-20962

Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position...

CVE-2025-20962

Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position...

CVE-2025-20962

The CVE-2025-20962 entry concerns Samsung’s SpenGesture service. Affected: SpenGesture service versions prior to SMR May-2025 Release 1. Cause: improper handling of insufficient permissions. Effect: local attackers could track the S Pen position. Mitigation: update to SMR May-2025 Release 1 or la...