CVE-2026-40477

creationtimestamp| type| source ---|---|--- 2026-04-17 23:20:20+00:00| published-proof-of-concept| Telegram/pKVsSWpOH4ztPjCePA6f2TZasDjFWE2MPBTfIhx3aN4UBbI 2026-04-17 23:21:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjq2uskvyj2d...

CVE-2026-5131

creationtimestamp| type| source ---|---|--- 2026-04-17 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-5131 2026-04-17 14:12:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp46v4ca222...

CVE-2026-40253

creationtimestamp| type| source ---|---|--- 2026-04-17 00:24:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjnnxazhf22f 2026-06-18 12:47:57+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mokuesork22b 2026-06-18 12:48:27+00:00| seen|...

CVE-2025-24539

creationtimestamp| type| source ---|---|--- 2025-04-17 16:58:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12284...

CVE-2025-32652

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:44+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325024388950...

CVE-2025-29045

creationtimestamp| type| source ---|---|--- 2025-04-17 14:58:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12238 2025-04-17 18:49:56+00:00| seen| https://t.me/cvedetector/23241...

CVE-2025-1290

creationtimestamp| type| source ---|---|--- 2025-04-17 00:59:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12176 2025-04-17 02:48:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmy3rx3zd52l 2025-04-17 03:40:08+00:00| seen|...

CVE-2025-1568

creationtimestamp| type| source ---|---|--- 2025-04-16 23:58:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12170 2025-04-17 02:06:34+00:00| seen| https://t.me/cvedetector/23197 2025-04-17 02:48:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmy3rwpma32q 2025-04-17...

CVE-2025-0756

creationtimestamp| type| source ---|---|--- 2025-04-16 22:57:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12163 2025-04-17 00:48:20+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114350548547803347 2025-04-17 02:06:36+00:00| seen| https://t.me/cvedetector/23199...

filesoul.com Cross Site Scripting vulnerability OBB-3918644

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Better Comments < 1.5.6 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. From the WordPress menu on the left...

Floating Chat Widget < 3.1.9 - Editor+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to "Chaty New Widget" 2. Create ...

Better Comments < 1.5.6 - Subscriber+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow low privilege users such as Subscribers to perform Stored Cross-Site Scripting attacks. PoC 1. From the menu on the left, go into "Users" and edit Subscriber user. 2. Upload a new avatar image and click...

Strong Testimonials < 3.1.12 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its Testimonial fields before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. The attack requires a specific view to be performed PoC Setup ...

WooCommerce Customers Manager < 29.8 - Reflected XSS

Description The plugin does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Make a logged in admin open the HTML page/URLs below...

Strong Testimonials < 3.1.12 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its Testimonial fields before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. The attack requires a specific view to be performed Setup as...

collepardo.litgofirm.it Cross Site Scripting vulnerability OBB-3265791

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

orange-solar.de Cross Site Scripting vulnerability OBB-3265658

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

muranoglass-shop.de Cross Site Scripting vulnerability OBB-3265521

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gam-y.de Cross Site Scripting vulnerability OBB-3264754

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...