24677 matches found
CVE-2025-6366 Event List <= 2.0.4 - Authenticated (Subscriber+) Privilege Escalation
The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. This is due to the plugin not properly validating a user's capabilities prior to updating their profile in the elupdateprofile function. This makes it possible for authenticated...
CVE-2025-6366
CVE-2025-6366 – The Event List WordPress plugin (versions ≤ 2.0.4) is vulnerable to privilege escalation due to insufficient validation of user capabilities in el_update_profile(). Authenticated users with Subscriber+ can elevate to administrator. Evidence from Wordfence/NVD/CVE records indicates...
CVE-2025-6366 Event List <= 2.0.4 - Authenticated (Subscriber+) Privilege Escalation
The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. This is due to the plugin not properly validating a user's capabilities prior to updating their profile in the elupdateprofile function. This makes it possible for authenticated...
CVE-2025-1501
creationtimestamp| type| source ---|---|--- 2025-08-26 11:15:46+00:00| seen| Telegram/N27lOVdqnw3XiA9FipVDMdRbb-8yxSrjMRPvSw5pFgA5pbU...
CVE-2025-31277
creationtimestamp| type| source ---|---|--- 2025-08-26 08:16:53+00:00| seen| https://vulnerability.circl.lu/bundle/c1aa3b44-ae54-436b-b3c3-a88194ecb70e 2026-03-18 15:22:35+00:00| exploited| https://t.me/truesecator/8007 2026-03-19 21:02:58+00:00| seen|...
CVE-2025-48005
creationtimestamp| type| source ---|---|--- 2025-08-26 06:30:26+00:00| seen| https://infosec.place/objects/932cb874-108d-4ab8-a61b-e391dc9ab55e...
CVE-2025-54481
creationtimestamp| type| source ---|---|--- 2025-08-26 06:00:34+00:00| seen| https://infosec.place/objects/b2da2ec8-4c53-4b1c-895a-87a06d68df32...
CVE-2025-9431
creationtimestamp| type| source ---|---|--- 2025-08-26 04:49:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbpmfrhrk2z...
CVE-2025-38675
creationtimestamp| type| source ---|---|--- 2025-08-26 01:33:32+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lxbeobmuss24...
CVE-2025-9415
creationtimestamp| type| source ---|---|--- 2025-08-26 01:24:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbe5zhmbu2k...
CVE-2025-56216
creationtimestamp| type| source ---|---|--- 2025-08-26 01:03:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbcz4otav2o...
CVE-2025-57802
creationtimestamp| type| source ---|---|--- 2025-08-26 00:34:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbbeontzw24...
CVE-2025-57772
creationtimestamp| type| source ---|---|--- 2025-08-26 00:27:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbaxynb7a2d 2026-07-20 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr3cozezzy2l...
PT-2025-34779 · WordPress · Event List
Name of the Vulnerable Software and Affected Versions: Event List plugin for WordPress versions up to and including 2.0.4 Description: The Event List plugin for WordPress is susceptible to privilege escalation. This occurs because the plugin does not adequately validate a user’s capabilities befo...
WordPress plugin Event List 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin Event List...
CVE-2025-54483
creationtimestamp| type| source ---|---|--- 2025-08-25 17:32:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxajshbnrf27 2025-08-26 06:00:33+00:00| seen| https://infosec.place/objects/b2da2ec8-4c53-4b1c-895a-87a06d68df32...
CVE-2025-54488
creationtimestamp| type| source ---|---|--- 2025-08-25 16:41:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxagwzgkrj2z 2025-08-26 06:00:34+00:00| seen| https://infosec.place/objects/b2da2ec8-4c53-4b1c-895a-87a06d68df32...
CVE-2025-56215
creationtimestamp| type| source ---|---|--- 2025-08-25 15:16:29+00:00| seen| Telegram/iIveS5oQM5IaPlj1DfLTt4IbZhYqJDTFGvmy8Dyf7lApU...
CVE-2025-52456
creationtimestamp| type| source ---|---|--- 2025-08-25 15:13:27+00:00| seen| https://bsky.app/profile/potato.software/post/3lxabzpj77e2t 2025-08-26 06:00:06+00:00| seen| https://infosec.place/objects/10286d20-ea98-489d-8e55-820dca10e508...