WordPress plugin “Order Delivery Date” has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2025-22123 · WordPress · Order Delivery Date

Name of the Vulnerable Software and Affected Versions: Order Delivery Date WordPress plugin versions prior to 12.4.0 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the plugin does not properly sanitise and escape a parameter before outputting it...

CVE-2025-48340

creationtimestamp| type| source ---|---|--- 2025-05-19 22:39:27+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpknauqadfo2 2025-05-20 00:43:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpku6jskox2p...

CVE-2025-39356

creationtimestamp| type| source ---|---|--- 2025-05-19 20:48:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpkgzynq4d2h...

CVE-2025-39355

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16944 2025-05-19 20:48:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpkgzycd3t24...

CVE-2025-39348

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16939 2025-05-19 20:48:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpkgzy3bgd2n 2025-05-19 22:39:39+00:00| seen|...

CVE-2025-32924

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16933 2025-05-19 20:48:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpkgzxs7ht24 2025-05-19 22:39:29+00:00| seen|...

CVE-2024-52879

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16930...

GHSA-HXW5-9CC5-CMW5

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16929...

WordPress Qi Blocks plugin < 1.4 - Contributor+ Stored XSS via Counter Block vulnerability

Contributor+ Stored XSS via Counter Block vulnerability discovered by Krugov Artyom in WordPress Plugin Qi Blocks versions 1.4...

CVE-2025-27010

creationtimestamp| type| source ---|---|--- 2025-05-19 19:39:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16924...

GHSA-5J3W-5PCR-F8HG

creationtimestamp| type| source ---|---|--- 2025-05-19 19:39:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16915...

CVE-2025-39451

creationtimestamp| type| source ---|---|--- 2025-05-19 19:38:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16908...

CVE-2025-48236

creationtimestamp| type| source ---|---|--- 2025-05-19 18:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpka2bh7ju2h...

CVE-2025-39454

creationtimestamp| type| source ---|---|--- 2025-05-19 17:38:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16887...

CVE-2025-4945

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

CVE-2025-4948

creationtimestamp| type| source ---|---|--- 2025-05-19 17:13:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zbsjmx2n 2025-05-26 07:46:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17535...

CVE-2025-4945 Libsoup: integer overflow in cookie expiration date handling in libsoup

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

CVE-2025-31262

creationtimestamp| type| source ---|---|--- 2025-05-19 16:39:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16884 2025-05-19 17:13:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zbejjy2t...

CVE-2025-24189

creationtimestamp| type| source ---|---|--- 2025-05-19 16:39:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16881 2025-05-19 17:13:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zan2jw2s 2025-05-19 19:38:08+00:00| seen|...