CVE-2025-32616 WordPress Nimbata Call Tracking plugin <= 1.7.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in nimbata Nimbata Call Tracking nimbata-call-tracking allows Stored XSS.This issue affects Nimbata Call Tracking: from n/a through = 1.7.4...

CVE-2025-32616

CVE-2025-32616 is a CSRF to Stored XSS vulnerability in Nimbata Call Tracking. Affected: Nimbata Call Tracking versions up to 1.7.1 (from n/a through 1.7.1). Impact per CVSS: high severity (base 7.1; confidentiality, integrity, and availability impact listed as low). Remediation status: no patch ...

GHSA-7V4R-C989-XH26

creationtimestamp| type| source ---|---|--- 2025-04-09 15:47:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11098 2025-04-09 15:56:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114308819955492247...

WordPress Nimbata Call Tracking plugin <= 1.7.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Abdi Pranata in WordPress Plugin Nimbata Call Tracking versions = 1.7.4...

CVE-2017-20197 propanetank Roommate-Bill-Tracking login.php sql injection

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

CVE-2017-20197

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

CVE-2017-20197 propanetank Roommate-Bill-Tracking login.php sql injection

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

Roommate-Bill-Tracking 注入漏洞

Roommate-Bill-Tracking is a relatively simple PHP application by Hayden Individual Developer for managing expenses between roommates and shared grocery lists. Roommate-Bill-Tracking suffers from an injection vulnerability that stems from the fact that incorrect manipulation of the parameter...

PT-2025-15689

Name of the Vulnerable Software and Affected Versions: propanetank Roommate-Bill-Tracking versions up to 288437f658fc9ee7d4b92a9da12557024d8bc55c Description: A critical issue has been found in the code of the /includes/login.php file. The manipulation of the Username argument leads to SQL...

WordPress plugin Nimbata Call Tracking 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-32616: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in nimbata Nimbata Call Tracking nimbata-call-tracking allows Stored XSS.This issue affects Nimbata Call Tracking: from n/a through = 1.7.4...

CVE-2017-20197: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

PT-2025-15802 · Nimbata · Nimbata Call Tracking

Name of the Vulnerable Software and Affected Versions: Nimbata Call Tracking versions 1.7.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web...

CVE-2025-3285

creationtimestamp| type| source ---|---|--- 2025-04-08 19:22:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmd756ore525 2025-04-09 13:15:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114308189037550499 2025-04-10 10:00:00+00:00| seen|...

GHSA-X82R-6J37-VRGG

creationtimestamp| type| source ---|---|--- 2025-04-08 11:46:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10897...

CVE-2025-22012

creationtimestamp| type| source ---|---|--- 2025-04-08 11:43:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114302162564110651 2025-04-08 14:00:01+00:00| seen| https://t.me/cvedetector/22449...

CVE-2025-26657

creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10870 2025-04-08 09:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5ciekjs2f 2025-04-08 11:29:15+00:00| seen| https://t.me/cvedetector/22428...

CVE-2025-3324

creationtimestamp| type| source ---|---|--- 2025-04-06 22:44:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10644 2025-04-07 02:50:32+00:00| seen| https://t.me/cvedetector/22232 2025-04-07 03:07:27+00:00| seen|...

CVE-2024-13744

creationtimestamp| type| source ---|---|--- 2025-04-04 04:35:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10389 2025-04-04 07:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114278590468850131 2025-04-04 07:48:27+00:00| seen|...

CVE-2024-56528

creationtimestamp| type| source ---|---|--- 2025-04-03 20:35:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10337 2025-04-03 22:05:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114276298770722682 2025-04-03 22:05:38+00:00| seen|...