24403 matches found
CVE-2025-11517
CVE-2025-11517 affects the WordPress plugin “Event Tickets and Registration” (
CVE-2025-11517 Event Tickets and Registration <= 5.26.5 - Unauthenticated Ticket Payment Bypass
The Event Tickets and Registration plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 5.26.5. This is due to the /wp-json/tribe/tickets/v1/commerce/free/order endpoint not verifying that a ticket type should be free allowing the user to bypass the payment...
CVE-2025-11517 Event Tickets and Registration <= 5.26.5 - Unauthenticated Ticket Payment Bypass
The Event Tickets and Registration plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 5.26.5. This is due to the /wp-json/tribe/tickets/v1/commerce/free/order endpoint not verifying that a ticket type should be free allowing the user to bypass the payment...
CVE-2025-11742
creationtimestamp| type| source ---|---|--- 2025-10-18 06:37:22+00:00| seen| Telegram/FC2c-QlLPHuauMqNhQwQFx5JW7taorj95gYL5eGQoTxt5c...
WordPress Event Tickets and Registration plugin <= 5.26.5 - Unauthenticated Ticket Payment Bypass vulnerability
Unauthenticated Ticket Payment Bypass vulnerability discovered by Jack Pas Dark. in WordPress Plugin Event Tickets versions = 5.26.5...
WordPress plugin Event Tickets and Registration 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
CVE-2025-62654
creationtimestamp| type| source ---|---|--- 2025-10-17 23:39:54+00:00| seen| Telegram/ZrBONzlzqZ0hBLs5ozvastRTRwo4Mac6iELUOqeL8Kt9fo...
GHSA-7944-7C6R-55VV
creationtimestamp| type| source ---|---|--- 2025-10-17 19:00:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115391044096635056...
CVE-2025-11712
creationtimestamp| type| source ---|---|--- 2025-10-17 13:39:21+00:00| seen| Telegram/Wg61De7ckLLBPvHDARJUro6m7z8cHj5jZVwSjhnV6uEQHIo...
CVE-2025-6893
creationtimestamp| type| source ---|---|--- 2025-10-17 10:34:57+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3f36igt6o2e 2025-10-17 13:34:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115389765944283292 2025-10-24 07:43:11+00:00| seen| https://t.me/icscert/1339...
CVE-2025-55092
creationtimestamp| type| source ---|---|--- 2025-10-17 05:20:59+00:00| seen| Telegram/0ADcdJdQegEBCngGyhjx6Psk8945WHsjefUys1fzUVkv0iY...
GHSA-VWH7-H99R-FVWQ
creationtimestamp| type| source ---|---|--- 2025-10-17 05:20:59+00:00| seen| Telegram/0ADcdJdQegEBCngGyhjx6Psk8945WHsjefUys1fzUVkv0iY...
Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass Vulnerability
Rockwell Automation PanelView Plus 7 Performance Series B is a versatile HMI application from Rockwell Automation. An authentication bypass vulnerability exists in Rockwell Automation PanelView Plus 7 Performance Series B, which can be exploited by an attacker to cause unauthorized access,...
SUSE CVE-2025-39983
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix UAF in hciconntxdequeue This fixes the following UAF caused by not properly locking hdev when processing HCIEVNUMCOMPPKTS: BUG: KASAN: slab-use-after-free in hciconntxdequeue+0x1be/0x220...
WordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin Event post versions = 5.10.3...
WordPress Event Tickets plugin <= 5.26.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by n0arafatn0 in WordPress Plugin Event Tickets versions = 5.26.3...
WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by ? in WordPress Theme News Event versions = 1.0.1...
CVE-2025-9902
creationtimestamp| type| source ---|---|--- 2025-10-16 11:32:06+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3m3cnvqubbx2m...
CVE-2025-39983
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix UAF in hciconntxdequeue This fixes the following UAF caused by not properly locking hdev when processing HCIEVNUMCOMPPKTS: BUG: KASAN: slab-use-after-free in hciconntxdequeue+0x1be/0x220...