CVE-2025-56556

Subrion CMS 4.2.1 is affected. The issue arises from the Run SQL Query tool in the SQL Tool admin panel, where authenticated administrators or moderators can gain escalated privileges due to insufficient privilege checks in the SQL query context. The vulnerability affects the Run SQL Query functi...

PT-2025-37256

Name of the Vulnerable Software and Affected Versions: Subrion CMS version 4.2.1 Description: An issue was discovered that allows authenticated administrators or moderators with access to the built-in Run SQL Query feature under the SQL Tool admin panel to gain escalated privileges in the context...

A Real-Time, Self-Tuning Moderator Framework for Adversarial Prompt Detection

Ensuring LLM alignment is critical to information security as AI models become increasingly widespread and integrated in society. Unfortunately, many defenses against adversarial attacks and jailbreaking on LLMs cannot adapt quickly to new attacks, degrade model responses to benign prompts, or...

CVE-2025-52772

Cross-Site Request Forgery CSRF vulnerability in Adnan Haque a11n Virtual Moderator allows Cross-Site Scripting XSS. This issue affects Virtual Moderator: from n/a through 1.4...

PhishDebate: an LLM-Based Multi-Agent Framework for Phishing Website Detection

Phishing websites continue to pose a significant cybersecurity threat, often leveraging deceptive structures, brand impersonation, and social engineering tactics to evade detection. While recent advances in large language models LLMs have enabled improved phishing detection through contextual...

CVE-2025-52772

Cross-Site Request Forgery CSRF vulnerability in Adnan Haque a11n Virtual Moderator allows Cross-Site Scripting XSS. This issue affects Virtual Moderator: from n/a through 1.4...

CVE-2025-52772 WordPress Virtual Moderator plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Adnan Haque a11n Virtual Moderator allows Cross-Site Scripting XSS. This issue affects Virtual Moderator: from n/a through 1.4...

CVE-2025-52772

Cross-Site Request Forgery CSRF vulnerability in Adnan Haque a11n Virtual Moderator allows Cross-Site Scripting XSS. This issue affects Virtual Moderator: from n/a through 1.4...

CVE-2025-52772 WordPress Virtual Moderator plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Adnan Haque a11n Virtual Moderator allows Cross-Site Scripting XSS. This issue affects Virtual Moderator: from n/a through 1.4...

CVE-2025-52772

CVE-2025-52772 is a CSRF vulnerability in the WordPress plugin Virtual Moderator (Adnan Haque) affecting versions up to 1.4, which can lead to Cross-Site Scripting (XSS). Connected documents confirm the issue is CSRF-enabled and can enable XSS in the affected plugin. There is no publicly provided...

WordPress和WordPress plugin 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-26411 · Unknown · Virtual Moderator

Name of the Vulnerable Software and Affected Versions: Adnan Haque a11n Virtual Moderator versions 1.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Cross-Site Scripting XSS. This means an attacker could potentially trick a user into...

WordPress Virtual Moderator plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Iwasawa Toshiki in WordPress Plugin Virtual Moderator versions = 1.4...

CVE-2025-47697

Client-side enforcement of server-side security issue exists in wivia 5 all versions. If exploited, an unauthenticated attacker may bypass authentication and operate the affected device as the moderator user...

CVE-2025-47697

Client-side enforcement of server-side security issue exists in wivia 5 all versions. If exploited, an unauthenticated attacker may bypass authentication and operate the affected device as the moderator user...

CVE-2025-47697

CVE-2025-47697 concerns the product wivia 5 (all versions), where a client-side enforcement of server-side security issue (CWE-602) could let an unauthenticated attacker bypass authentication and operate the device as the moderator user. The affected component is the web/app interface for wivia 5...

CVE-2025-41406

Cross-site scripting vulnerability exists in wivia 5 all versions. If exploited, when a user connects to the affected device with a specific operation, an arbitrary script may be executed on the web browser of the moderator user...

CVE-2024-38518

BigBlueButton is an open-source virtual classroom designed to help teachers teach and learners learn. An attacker with a valid join link to a meeting can trick BigBlueButton into generating a signed join link with additional parameters. One of those parameters may be "role=moderator", allowing an...

CVE-2024-52589

Discourse is an open source platform for community discussion. Moderators can see the Screened emails list in the admin dashboard, and through that can learn the email of a user. This problem is patched in the latest version of Discourse. Users unable to upgrade should remove moderator role from...

CVE-2023-22454

Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 3.0.0.beta16 on the beta and tests-passed branches, pending post titles can be used for cross-site scripting attacks. Pending posts can be created by unprivileged users when a category has...