CVE-2025-23464 WordPress Twitter News Feed plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Twitter News Feed allows Reflected XSS. This issue affects Twitter News Feed: from n/a through 1.1.1...

CVE-2025-23464 WordPress Twitter News Feed plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Keir Whitaker Twitter News Feed twitter-news-feed allows Reflected XSS.This issue affects Twitter News Feed: from n/a through = 1.1.1...

CVE-2024-53030

creationtimestamp| type| source ---|---|--- 2025-03-03 10:29:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6174 2025-03-03 13:52:23+00:00| seen| https://t.me/cvedetector/19333 2025-03-08 04:34:56+00:00| seen| Telegram/OGIDiKvvM0Jjiz1z9hdpv-wf9g1Zg56ibqiTUo2p4xAOFCK 2025-08-18...

WordPress plugin NotFound Twitter News Feed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-1491

creationtimestamp| type| source ---|---|--- 2025-03-01 13:27:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6075 2025-03-01 16:27:04+00:00| seen| https://t.me/cvedetector/19238 2025-03-02 11:46:59+00:00| seen| Telegram/fQwhT3m-JQIcT-R9UMsIx5GWX6a33IPjwKCBE6dg2xBQgVw 2025-08-19...

GHSA-VR88-2HV2-5JVF

creationtimestamp| type| source ---|---|--- 2025-02-28 23:49:13+00:00| seen| https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca...

CVE-2025-27000

Missing Authorization vulnerability in George Pattichis Simple Photo Feed simple-photo-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Photo Feed: from n/a through = 1.4.0...

CVE-2024-13678

The R3W InstaFeed WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-27000

Missing Authorization vulnerability in George Pattichis Simple Photo Feed simple-photo-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Photo Feed: from n/a through = 1.4.0...

CVE-2025-27000 WordPress Simple Photo Feed Plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in George Pattichis Simple Photo Feed simple-photo-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Photo Feed: from n/a through = 1.4.0...

CVE-2025-27000 WordPress Simple Photo Feed Plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in George Pattichis Simple Photo Feed simple-photo-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Photo Feed: from n/a through = 1.4.0...

CVE-2025-27000

CVE-2025-27000 refers to a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Simple Photo Feed. Affected range per the entry: Simple Photo Feed 1.0 through 1.4.0. The metrics indicate an external network-accessible flaw with low attack complexity and required pri...

WordPress plugin Simple Photo Feed 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Medium: php

Issue Overview: The upstream advisory describes this issue as follows: A memory-related vulnerability in PHP's filter handling system, particularly when processing input with convert.quoted-printable-decode filters, leads to a segmentation fault. This vulnerability is triggered through specific...

PT-2025-7885 · Unknown · Simple Photo Feed

Name of the Vulnerable Software and Affected Versions: Simple Photo Feed versions 1.4.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured access control security levels. Recommendations: For Simple Photo...

Medium: php8.1

Issue Overview: The upstream advisory describes this issue as follows: A memory-related vulnerability in PHP's filter handling system, particularly when processing input with convert.quoted-printable-decode filters, leads to a segmentation fault. This vulnerability is triggered through specific...

PT-2025-26481

Name of the Vulnerable Software and Affected Versions: DNN formerly DotNetNuke versions 6.0.0 through 10.0.0 Description: The issue allows a specially crafted request to inject scripts in the "Activity Feed Attachments" endpoint, which will then render in the feed, resulting in a cross-site...

CVE-2024-29508

creationtimestamp| type| source ---|---|--- 2025-02-14 18:49:11+00:00| seen| https://t.me/CyberSecurityTechnologies/11812 2025-02-15 15:03:36+00:00| published-proof-of-concept| https://t.me/ton618cyber/6674 2025-02-15 15:03:36+00:00| published-proof-of-concept| https://t.me/ton618cyber/2456...

CVE-2020-14152

creationtimestamp| type| source ---|---|--- 2025-02-14 16:37:45+00:00| seen| https://vulnerability.circl.lu/bundle/7d76c81b-048b-457f-800a-dc4e82520dd3...

OESA-2025-1119 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters "\r\n" when those are prefixed with a null byte. This enables...