43 matches found
CVE-2025-46470
CVE-2025-46470 concerns WordPress Smart Hashtags [#hashtagger] plugin (versions up to 7.2.3) with a Missing Authorization vulnerability due to incorrectly configured access control. The public details identify a Medium severity (CVSS 3.1 base 4.3) , exploitable remotely without user interaction. ...
PT-2025-17785 · Unknown · Smart Hashtags
Name of the Vulnerable Software and Affected Versions: Smart Hashtags versions through 7.2.3 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions through 7.2.3,...
CVE-2025-28931
Cross-Site Request Forgery CSRF vulnerability in DevriX Hashtags wp-hashtags allows Stored XSS.This issue affects Hashtags: from n/a through = 0.3.2...
WordPress WordPress Hashtags plugin <= 0.3.2 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Hashtags versions = 0.3.2...
CVE-2025-28931
Cross-Site Request Forgery CSRF vulnerability in DevriX Hashtags wp-hashtags allows Stored XSS.This issue affects Hashtags: from n/a through = 0.3.2...
CVE-2025-28931 WordPress WordPress Hashtags plugin <= 0.3.2 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in DevriX Hashtags wp-hashtags allows Stored XSS.This issue affects Hashtags: from n/a through = 0.3.2...
CVE-2025-28931 WordPress WordPress Hashtags plugin <= 0.3.2 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in DevriX Hashtags wp-hashtags allows Stored XSS.This issue affects Hashtags: from n/a through = 0.3.2...
CVE-2025-28931
CVE-2025-28931 : A CSRF to Stored XSS flaw affects the WordPress Hashtags plugin (wp-hashtags)
WordPress plugin Hashtags 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...
WordPress Wbcom BuddyPress Hashtags premium plugin <= 2.6.0 - Arbitrary Plugin Installation, Activation and Deactivation vulnerability
Arbitrary Plugin Installation, Activation and Deactivation vulnerability discovered by Mary JJ Jay in WordPress Wbcom BuddyPress Hashtags premium plugin versions = 2.6.0. Solution Update the WordPress Wbcom BuddyPress Hashtags premium plugin to the latest available version at least 2.7.0...
Reddit: [dubsmash] Long String in 'shoutout' Parameter Leading Internal server Error on Popular hastags , Community and User Profile
Summary: If the user input a long string in the 'shoutout' parameter of the 'CreateVideo' API then all the APIs where this video is supposed to appear eg: hashtag API, community API, and user profile API will throw 'internal server error' in the response. This will cause a denial of service attac...
Osintgram - A OSINT Tool On Instagram
Osintgram is a OSINT tool on Instagram. Osintgram offers an interactive shell to perform analysis on Instagram account of any users by its nickname. You can get: - addrs Get all registered addressed by target photos - captions Get user's photos captions - comments Get total comments of target's...
X (Formerly Twitter): Protected tweets exposure through the URL
Summary Leaking sensitive information from protected tweets via a prepared website. This vulnerability could lead to exposure of information such as credit card numbers, bank account numbers, phone numbers, tokens, specific words or even the whole phrases but also the exposure of any additional...
Simple Twitter Metadata Scraper
Simple Twitter Metadata Scraper The goal of this simple python script is to analyze a Twitter profile through its tweets by detecting: Average tweet activity, by hour and by day of the week Timezone and language set for the Twitter interface Sources used mobile application, web browser, …...
Letstag - Instagram hashtags - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Letstag - Instagram hashtags published at the 'play' market has multiple vulnerabilities...
HashTags - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application HashTags published at the 'play' market has multiple vulnerabilities...
WordPress Social Hashtags Plugin <= 2.0.0 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability in new post title field. Solution Update the plugin...
WordPress Social Hashtags Plugin <= 2.0.0 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability in new post title field. Solution Update the plugin...
tinfoleak - Get detailed information about a Twitter user activity
tinfoleak is a simple Python script that allow to obtain: basic information about a Twitter user name, picture, location, followers, etc. devices and operating systems used by the Twitter user applications and social networks used by the Twitter user place and geolocation coordinates to generate ...
