24771 matches found
CVE-2025-6875
creationtimestamp| type| source ---|---|--- 2025-06-29 22:56:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19881 2025-06-30 00:29:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsrwk7ke4j2p...
CVE-2025-6822
creationtimestamp| type| source ---|---|--- 2025-06-28 18:54:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19826 2025-06-28 22:35:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsp7omuxwy2a...
CVE-2023-28904
creationtimestamp| type| source ---|---|--- 2025-06-28 15:55:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19813 2025-06-28 18:22:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsorjqkqoa2m...
CVE-2025-5540
The Event RSVP and Simple Event Management Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emdmbmeta' shortcode in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes...
CVE-2025-53272
creationtimestamp| type| source ---|---|--- 2025-06-27 14:51:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19739...
CVE-2025-53271
creationtimestamp| type| source ---|---|--- 2025-06-27 14:51:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19738...
CVE-2025-36595
creationtimestamp| type| source ---|---|--- 2025-06-27 14:51:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19721...
CVE-2025-5535
creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19563...
CVE-2025-5540
The Event RSVP and Simple Event Management Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emdmbmeta' shortcode in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes...
CVE-2025-5540 Event RSVP and Simple Event Management Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Event RSVP and Simple Event Management Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emdmbmeta' shortcode in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes...
CVE-2025-5540 Event RSVP and Simple Event Management Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Event RSVP and Simple Event Management Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emdmbmeta' shortcode in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes...
CVE-2025-5540
CVE-2025-5540 : The WordPress plugin “Event RSVP and Simple Event Management Plugin” is vulnerable to stored XSS via the emd_mb_meta shortcode in all versions up to 4.1.0 due to insufficient input sanitization and output escaping. The vulnerability affects authenticated users with contributor+ pr...
WordPress Event RSVP and Simple Event Management Plugin plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Event RSVP and Simple Event Management Plugin versions = 4.1.0...
WordPress plugin Event RSVP and Simple Event Management Plugin 跨站脚本漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exist...
DRUPAL-CONTRIB-2025-079
Open Social is a Drupal distribution for online communities, which ships with a default module that allows users to enroll in events. The module doesn't sufficiently protect certain routes from Cross Site Request Forgery CSRF attacks. Users can be tricked into accepting or rejecting these...
Malicious code in event.custom (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d4e1a2acf7b5dbcce868542bf3f02afdd7175b413acd4d4369a891863a7e7f9 Any computer that has this package installed or running should be considered...
VulnCheck KEV: CVE-2024-0692
The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution...
Open Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079
Open Social is a Drupal distribution for online communities, which ships with a default module that allows users to enroll in events. The module doesn't sufficiently protect certain routes from Cross Site Request Forgery CSRF attacks. Users can be tricked into accepting or rejecting these...