WordPress Smash Balloon Instagram Feed plugin <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-plugin` Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via data-plugin Attribute vulnerability discovered by Asaf Mozes in WordPress Plugin Instagram Feed versions = 6.9.0...

CVE-2025-48926

creationtimestamp| type| source ---|---|--- 2025-05-28 18:40:13+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lqau3iu2ea24 2025-07-01 20:09:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20082...

CVE-2025-31501

creationtimestamp| type| source ---|---|--- 2025-05-28 18:24:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqat7hbo4h42...

CVE-2024-57337

creationtimestamp| type| source ---|---|--- 2025-05-28 18:24:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqat75m4lsp2 2025-05-28 20:14:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqaze7bstv2m...

CVE-2024-47055

creationtimestamp| type| source ---|---|--- 2025-05-28 18:24:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqat6o76wyp2 2025-05-30 22:01:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqgabtmflb2e...

CVE-2025-48747

creationtimestamp| type| source ---|---|--- 2025-05-28 17:32:38+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaqajq3vtp2...

CVE-2025-48746

creationtimestamp| type| source ---|---|--- 2025-05-28 17:32:38+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaqadh5qmj2...

CVE-2024-47056

creationtimestamp| type| source ---|---|--- 2025-05-28 17:32:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaq7z7pjnp2 2025-05-30 22:07:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqgam4t2os2m...

CVE-2025-36572

creationtimestamp| type| source ---|---|--- 2025-05-28 17:32:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaqa5j3vqr2...

CVE-2025-48925

The TeleMessage service through 2025-05-05 relies on the client side e.g., the TM SGNL app to do MD5 hashing, and then accepts the hash as the authentication credential...

CVE-2024-38341

creationtimestamp| type| source ---|---|--- 2025-05-28 16:29:45+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqamrzdeylr2...

CVE-2025-5299

creationtimestamp| type| source ---|---|--- 2025-05-28 15:22:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaiu6e5myt2 2025-05-28 16:07:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqalk2au7e2e...

CVE-2025-5298

A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch th...

CVE-2025-5298

creationtimestamp| type| source ---|---|--- 2025-05-28 12:13:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqa6iaxb6p42 2025-05-29 09:51:18+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lqcgymfvui27 2025-05-30...

CVE-2025-46777

creationtimestamp| type| source ---|---|--- 2025-05-28 08:24:04+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7rmu2nxsc2 2025-05-28 09:58:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7ww667iy2e...

CVE-2025-24473

creationtimestamp| type| source ---|---|--- 2025-05-28 08:18:47+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7rd7j2xk42 2025-05-28 10:18:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7xzykyjn2r...

CVE-2025-48847

creationtimestamp| type| source ---|---|--- 2025-05-28 07:48:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7pnkyref2k...

CVE-2025-48844

creationtimestamp| type| source ---|---|--- 2025-05-28 07:38:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7p3nqfx42o...

CVE-2025-48842

creationtimestamp| type| source ---|---|--- 2025-05-28 07:26:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7ohb3uvz2j...

CVE-2024-53423

creationtimestamp| type| source ---|---|--- 2025-05-28 04:49:37+00:00| seen| https://gist.github.com/kjw6855/abeecc798d138b49537393e1fd3a5e96 2025-05-29 18:57:39+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdffae6lck2...