Lucene search
+L

24677 matches found

Patchstack
Patchstack
added 2025/03/27 11:02 a.m.6 views

WordPress Themify Event Post Plugin <= 1.3.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Themify Event Post versions = 1.3.2...

7.5CVSS7AI score0.01069EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2025/03/27 10:55 a.m.52 views

CVE-2025-30832

CVE-2025-30832 is a DOM-based XSS in Themify Event Post (WordPress). Affected: Themify Event Post versions from 1.0 through 1.3.2 (n/a to 1.3.2). Root cause: improper input handling during web page generation leading to cross-site scripting. Impact: XSS risk for authenticated users; exploitation ...

6.5CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/27 10:55 a.m.6 views

CVE-2025-30832 WordPress Themify Event Post Plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themifyme Themify Event Post themify-event-post allows DOM-Based XSS.This issue affects Themify Event Post: from n/a through = 1.3.2...

6.5CVSS7.3AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/27 10:55 a.m.30 views

CVE-2025-30832 WordPress Themify Event Post Plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themifyme Themify Event Post themify-event-post allows DOM-Based XSS.This issue affects Themify Event Post: from n/a through = 1.3.2...

6.5CVSS0.00354EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/27 10:55 a.m.57 views

CVE-2025-30831

CVE-2025-30831 is a vulnerability in Themify Event Post (WordPress) classified as an authenticated local file inclusion via an improper include/require filename handling (PHP Remote File Inclusion) in versions up through 1.3.2. The issue enables an attacker with authenticated access to influence ...

7.5CVSS7.2AI score0.01069EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/27 10:55 a.m.4 views

CVE-2025-30831 WordPress Themify Event Post Plugin <= 1.3.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in themifyme Themify Event Post themify-event-post allows PHP Local File Inclusion.This issue affects Themify Event Post: from n/a through = 1.3.2...

7.5CVSS7.2AI score0.01069EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/27 10:55 a.m.30 views

CVE-2025-30831 WordPress Themify Event Post Plugin <= 1.3.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in themifyme Themify Event Post themify-event-post allows PHP Local File Inclusion.This issue affects Themify Event Post: from n/a through = 1.3.2...

7.5CVSS0.01069EPSS
SaveExploits0References1
Circl
Circl
added 2025/03/27 9:26 a.m.13 views

CVE-2025-29993

creationtimestamp| type| source ---|---|--- 2025-03-27 09:26:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9035 2025-03-27 12:28:06+00:00| seen| https://t.me/cvedetector/21272 2025-03-29 23:53:04+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3llkjloo3l22b...

5.3CVSS5.4AI score0.00279EPSS
SaveExploits0References3
Circl
Circl
added 2025/03/27 4:26 a.m.8 views

CVE-2025-31109

creationtimestamp| type| source ---|---|--- 2025-03-27 04:26:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9021 2025-03-27 06:37:13+00:00| seen| https://t.me/cvedetector/21257...

4.8AI score
SaveExploits0References2
NVD
NVD
added 2025/03/27 1:15 a.m.24 views

CVE-2025-30355

Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known...

7.5CVSS0.01181EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2025/03/27 12:59 a.m.21 views

CVE-2025-30355

Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known...

7.5CVSS6.9AI score0.01181EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/03/27 12:00 a.m.7 views

WordPress plugin Awesome Event Booking 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS8.8AI score0.00355EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/27 12:00 a.m.9 views

WordPress plugin Awesome Event Booking 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site request...

4.3CVSS8.9AI score0.00156EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/27 12:00 a.m.7 views

WordPress plugin themifyme Themify Event Post 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in PHP. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.5CVSS8.3AI score0.01069EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/03/27 12:00 a.m.9 views

PT-2025-13104 · Themify · Themify Event Post

Name of the Vulnerable Software and Affected Versions: Themify Event Post versions 1.3.2 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local Fi...

7.5CVSS9.2AI score0.01069EPSS
SaveExploits0References6
Circl
Circl
added 2025/03/26 11:55 p.m.29 views

CVE-2025-20231

creationtimestamp| type| source ---|---|--- 2025-03-26 23:55:51+00:00| seen| https://t.me/cvedetector/21232 2025-08-10 18:27:45+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:48:00+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c...

7.1CVSS7AI score0.00493EPSS
SaveExploits0References1
Circl
Circl
added 2025/03/26 10:25 p.m.14 views

CVE-2025-20227

creationtimestamp| type| source ---|---|--- 2025-03-26 22:25:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8998 2025-03-26 23:56:00+00:00| seen| https://t.me/cvedetector/21239...

4.3CVSS4.8AI score0.00413EPSS
SaveExploits0References2
Circl
Circl
added 2025/03/26 7:26 p.m.15 views

CVE-2025-26009

creationtimestamp| type| source ---|---|--- 2025-03-26 19:26:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8936 2025-03-26 22:15:33+00:00| seen| https://t.me/cvedetector/21225...

7.5CVSS4.8AI score0.00366EPSS
SaveExploits0References2
Circl
Circl
added 2025/03/26 6:25 p.m.9 views

CVE-2023-22358

creationtimestamp| type| source ---|---|--- 2025-03-26 18:25:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8923...

7.8CVSS7.4AI score0.00217EPSS
SaveExploits0References1
Circl
Circl
added 2025/03/26 6:25 p.m.16 views

CVE-2025-2562

creationtimestamp| type| source ---|---|--- 2025-03-26 18:25:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8916 2025-03-26 20:34:50+00:00| seen| https://t.me/cvedetector/21205...

5.4CVSS4.8AI score0.00412EPSS
SaveExploits0References2
Rows per page
Query Builder