WordPress Awesome Event Booking plugin <= 2.7.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Awesome Event Booking versions = 2.7.5...

The vulnerability of the software for centralized device management in Fortinet FortiManager, as well as security event monitoring and analysis tools FortiAnalyzer, arises due to errors in processing the relative path to the directory. This allows a malicious actor to execute arbitrary code.

The vulnerability of the software for centralized device management of Fortinet FortiManager, as well as security event monitoring and analysis tools FortiAnalyzer, is related to errors in processing the relative path to the directory. Exploiting this vulnerability allows a malicious actor to...

[SECURITY] Fedora 40 Update: nodejs18-18.20.6-1.fc40

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

WordPress WP Event Aggregator Plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin WP Event Aggregator versions = 1.8.2...

CVE-2024-0159

creationtimestamp| type| source ---|---|--- 2025-02-01 17:28:11+00:00| seen| Telegram/Jyekov4QnFgQr8qtEIblR1MDeiOfKxifY4AptEDIiXRIWD...

CVE-2024-2618

creationtimestamp| type| source ---|---|--- 2025-02-01 17:28:09+00:00| seen| Telegram/Eu6VMxSwSs0acCj5GlaC6jUjWjG7sUEhGKl8uFKXMKzS-2d-...

[SECURITY] Fedora 41 Update: nodejs20-20.18.2-2.fc41

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

[SECURITY] Fedora 41 Update: nodejs18-18.20.6-1.fc41

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

RHSA-2018:2939

creationtimestamp| type| source ---|---|--- 2025-01-31 19:15:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3675...

RHSA-2018:1320

creationtimestamp| type| source ---|---|--- 2025-01-31 19:15:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3675...

CVE-2025-21671

creationtimestamp| type| source ---|---|--- 2025-01-31 12:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzy3ejwgj2t 2025-01-31 13:15:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3660 2025-01-31 15:22:39+00:00| seen|...

CVE-2025-24560

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Reflected XSS.This issue affects Awesome Event Booking: from n/a through = 2.7.1...

CVE-2025-24560 WordPress Awesome Event Booking plugin <= 2.7.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Reflected XSS.This issue affects Awesome Event Booking: from n/a through = 2.7.1...

CVE-2025-24560

CVE-2025-24560 affects the WordPress plugin Awesome Event Booking up to version 2.7.1 (and possibly n/a). The flaw is a Reflected Cross-Site Scripting (XSS) caused by improper input neutralization during page generation. Published references indicate the vulnerable surface is the WordPress plugin (

CVE-2025-24560 WordPress Awesome Event Booking plugin <= 2.7.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Reflected XSS.This issue affects Awesome Event Booking: from n/a through = 2.7.1...

CVE-2024-13216

The HT Event – WordPress Event Manager Plugin for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.7 via the 'render' function in /includes/widgets/hteventsponsor.php. This makes it possible for authenticated attackers, with...

CVE-2024-2342

creationtimestamp| type| source ---|---|--- 2025-01-31 03:21:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3555 2025-01-31 04:12:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3567...

CVE-2022-28653

creationtimestamp| type| source ---|---|--- 2025-01-31 00:59:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113920254948615257 2025-01-31 01:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyt5skr3k2c 2025-01-31 03:35:32+00:00| seen|...

PT-2025-5405 · Unknown · Awesome Event Booking

Name of the Vulnerable Software and Affected Versions: Awesome Event Booking versions n/a through 2.7.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can...

WordPress plugin Awesome Event Booking 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...