WordPress Url Rewrite Analyzer plugin <= 1.3.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin Url Rewrite Analyzer versions = 1.3.3...

WordPress Change Add to Cart Button Text for WooCommerce plugin <= 2.2.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Change Add to Cart Button Text for WooCommerce versions = 2.2.2...

WordPress Shortlinks by Pretty Links plugin <= 3.6.15 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin Shortlinks by Pretty Links versions = 3.6.15...

CVE-2025-4938

creationtimestamp| type| source ---|---|--- 2025-05-19 15:39:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16864 2025-05-19 17:13:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zc7xyr2h...

CVE-2025-40948

creationtimestamp| type| source ---|---|--- 2025-05-19 14:23:03+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lpjrjcslks2q 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-02 2026-07-17 13:07:38+00:00| seen|...

CVE-2025-2099

creationtimestamp| type| source ---|---|--- 2025-05-19 11:44:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpjin4nwpvv2 2025-05-19 13:12:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnlrnrqb24...

CVE-2025-4930

creationtimestamp| type| source ---|---|--- 2025-05-19 11:38:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16839 2025-05-19 13:13:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnkiteo2o...

CVE-2025-4927

A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/between-dates-application-report.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to...

CVE-2025-4925

creationtimestamp| type| source ---|---|--- 2025-05-19 09:38:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16835 2025-05-19 13:13:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnkb4pp2s...

CVE-2025-47758

creationtimestamp| type| source ---|---|--- 2025-05-19 08:38:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16822 2025-05-19 09:13:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpja7zwrxy2n...

CVE-2025-47760

creationtimestamp| type| source ---|---|--- 2025-05-19 08:38:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16820 2025-05-19 09:13:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjaa24zye2h...

WordPress WooCommerce Checkout & Funnel Builder by FunnelKit plugin < 3.10.2 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by Francisco Alisson in WordPress Plugin Funnel Builder by FunnelKit versions 3.10.2...

CVE-2025-4907

creationtimestamp| type| source ---|---|--- 2025-05-19 03:38:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16799 2025-05-19 05:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissinmex2p...

CVE-2025-4908

creationtimestamp| type| source ---|---|--- 2025-05-19 03:38:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16798 2025-05-19 05:13:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissik3jk2o...

CVE-2025-4909

creationtimestamp| type| source ---|---|--- 2025-05-19 03:38:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16796 2025-05-19 05:13:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissid4ty2l...

CVE-2025-31221

creationtimestamp| type| source ---|---|--- 2025-05-19 03:23:01+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lpimn42o5k2k 2026-04-02 22:17:09+00:00| seen| Telegram/B6vWUmFTVCX1yfhELfHqaTN2Gx6ui5cUH0-W9-255yNy0M...

CVE-2025-23164

creationtimestamp| type| source ---|---|--- 2025-05-19 02:38:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16794 2025-05-19 05:13:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpisshpbfi24 2026-07-12 22:00:07+00:00| seen| https://t.me/securixykz/1146 2026-07-13...

CVE-2025-23166

The C++ method SignTraits::DeriveBits may incorrectly call ThrowException based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary...

WordPress Push Notification for Post and BuddyPress plugin <= 1.93 - Multiple Unauthenticated SQLi vulnerability

Multiple Unauthenticated SQLi vulnerability discovered by Project Black in WordPress Plugin Push Notification for Post and BuddyPress versions = 1.93...

WordPress Easy Property Listings plugin <= 3.5.3 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by cyc707 in WordPress Plugin Easy Property Listings versions = 3.5.3...