WordPress Xavin's List Subpages plugin <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang in WordPress Plugin Xavin's List Subpages versions = 1.3...

CVE-2018-6335

creationtimestamp| type| source ---|---|--- 2025-05-06 19:21:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15196...

CVE-2018-19918

creationtimestamp| type| source ---|---|--- 2025-05-06 19:21:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15195...

CVE-2022-26709

creationtimestamp| type| source ---|---|--- 2025-05-06 19:21:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15190...

CVE-2025-4358

creationtimestamp| type| source ---|---|--- 2025-05-06 18:39:54+00:00| exploited| https://t.me/cvedetector/24618 2025-05-15 07:33:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16456...

CVE-2025-4368

creationtimestamp| type| source ---|---|--- 2025-05-06 18:21:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojis626lq2h 2025-05-06 20:20:20+00:00| exploited| https://t.me/cvedetector/24629...

CVE-2025-22873

creationtimestamp| type| source ---|---|--- 2025-05-06 17:20:50+00:00| seen| https://seclists.org/oss-sec/2025/q2/106 2025-05-06 19:09:16+00:00| seen| https://bsky.app/profile/golang.org/post/3lojlh463e22x 2025-05-07 02:17:18+00:00| seen|...

CVE-2025-32022

Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects...

CVE-2022-37623

creationtimestamp| type| source ---|---|--- 2025-05-06 16:22:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15161...

CVE-2018-6347

creationtimestamp| type| source ---|---|--- 2025-05-06 16:22:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15157...

CVE-2025-22479

creationtimestamp| type| source ---|---|--- 2025-05-06 16:21:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15147 2025-05-06 18:21:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojis7kdma2h...

CVE-2021-11123

creationtimestamp| type| source ---|---|--- 2025-05-06 14:49:58+00:00| seen| https://gist.github.com/chrispatrick/ef9adba1d09172543266af24c83130a8...

CVE-2025-12777

creationtimestamp| type| source ---|---|--- 2025-05-06 14:49:58+00:00| seen| https://gist.github.com/chrispatrick/ef9adba1d09172543266af24c83130a8...

CVE-2025-45250

creationtimestamp| type| source ---|---|--- 2025-05-06 14:08:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/35780 2025-05-06 18:21:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojis6pk2k2j 2025-05-06 20:20:12+00:00| seen| https://t.me/cvedetector/24622...

WordPress PGS Core plugin <= 5.8.0 - Missing Authorization via Multiple Functions vulnerability

Missing Authorization via Multiple Functions vulnerability discovered by István Márton in WordPress Plugin PGS Core versions = 5.8.0...

CVE-2025-21462

creationtimestamp| type| source ---|---|--- 2025-05-06 10:21:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loinx6outs2o 2025-05-06 12:48:36+00:00| seen| https://t.me/cvedetector/24582 2025-05-06 13:21:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15110...

CVE-2025-21467

creationtimestamp| type| source ---|---|--- 2025-05-06 10:21:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loinx5b4xb22 2025-05-06 12:48:36+00:00| seen| https://t.me/cvedetector/24583...

CVE-2025-21459

creationtimestamp| type| source ---|---|--- 2025-05-06 10:21:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loinx4uj2f2t 2025-05-06 12:48:31+00:00| seen| https://t.me/cvedetector/24580...

CVE-2025-4345

creationtimestamp| type| source ---|---|--- 2025-05-06 10:21:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15081 2025-05-06 10:36:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiorxu4rb2e 2025-05-06 14:29:06+00:00| seen|...

CVE-2025-4346

creationtimestamp| type| source ---|---|--- 2025-05-06 10:21:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15080 2025-05-06 10:36:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiorxffxe24 2025-05-06 14:29:06+00:00| seen|...