Debian: Security Advisory (DSA-5907-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7455-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-3986

creationtimestamp| type| source ---|---|--- 2025-04-27 21:11:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13636 2025-04-27 21:40:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnt7owncbd2h 2025-04-28 01:31:11+00:00| seen| https://t.me/cvedetector/23866 2026-01-08...

CVE-2025-3984

creationtimestamp| type| source ---|---|--- 2025-04-27 20:09:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13632 2025-04-27 21:40:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnt7owv5fv2d 2025-04-27 23:00:34+00:00| seen|...

CVE-2025-3978

creationtimestamp| type| source ---|---|--- 2025-04-27 17:10:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13625 2025-04-27 19:40:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnsyy6in4u2y 2025-04-27 21:20:12+00:00| seen|...

CVE-2025-3973

creationtimestamp| type| source ---|---|--- 2025-04-27 15:11:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13622 2025-04-27 15:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnslbpylhh2u 2025-04-27 17:01:02+00:00| published-proof-of-concept|...

CVE-2025-54252

creationtimestamp| type| source ---|---|--- 2025-04-27 11:00:39+00:00| seen| https://bsky.app/profile/ardacetin.org/post/3lns3x6754s2n 2025-04-27 11:00:39+00:00| seen| https://bsky.app/profile/ardacetin.org/post/3lns3x66qgk2n 2025-04-27 11:00:40+00:00| seen|...

CVE-2025-3964

creationtimestamp| type| source ---|---|--- 2025-04-27 09:09:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13611 2025-04-27 11:32:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lns5or43kri2 2025-04-27...

CVE-2024-52887

creationtimestamp| type| source ---|---|--- 2025-04-27 08:08:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13609 2025-04-27 11:23:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lns564rwbto2 2025-04-27 11:34:47+00:00| seen|...

CVE-2025-46673

creationtimestamp| type| source ---|---|--- 2025-04-27 01:08:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13591 2025-04-27 01:48:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114407408963291150 2025-04-27 03:35:26+00:00| seen|...

CVE-2025-46656

creationtimestamp| type| source ---|---|--- 2025-04-26 21:37:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnqowbwrl5o2 2025-04-26 23:35:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnqvniqhjb2b 2025-04-27...

GHSA-637G-8V47-79MV

creationtimestamp| type| source ---|---|--- 2025-04-26 18:08:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13580...

CVE-2025-46480

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Padam Shankhadev Nepali Post Date nepali-post-date allows Stored XSS.This issue affects Nepali Post Date: from n/a through = 5.1.1...

CVE-2025-2907

The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when importing settings. Furthermore it also lacks proper checks to only update options relevant to the Order Delivery Date WordPress plugin before 12.3.1. This leads to attackers being able to modi...

CVE-2025-2105

creationtimestamp| type| source ---|---|--- 2025-04-26 06:08:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13572 2025-04-26 06:13:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnp3etdzqxa2 2025-04-26 07:48:22+00:00| seen|...

CVE-2025-2907 Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Update

The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when importing settings. Furthermore it also lacks proper checks to only update options relevant to the Order Delivery Date WordPress plugin before 12.3.1. This leads to attackers being able to modi...

CVE-2025-2907

The CVE-2025-2907 issue affects the WordPress plugin Order Delivery Date Pro for WooCommerce (versions before 12.3.1). The root cause is missing authorization and CSRF checks when importing settings, allowing an unauthenticated attacker to update arbitrary options such as default_user_role to adm...

CVE-2025-2907 Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Update

The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when importing settings. Furthermore it also lacks proper checks to only update options relevant to the Order Delivery Date WordPress plugin before 12.3.1. This leads to attackers being able to modi...

PT-2025-17953 · WordPress · Order Delivery Date

Name of the Vulnerable Software and Affected Versions: Order Delivery Date WordPress plugin versions prior to 12.3.1 Description: The issue concerns a lack of authorization and CSRF checks when importing settings in the Order Delivery Date WordPress plugin. This allows attackers to modify sensiti...

WordPress plugin Order Delivery Date 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...