CVE-2026-11981

The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.15.3 This is due to missing nonce validation on the givesetnotificationstatushandler function. This makes it possible for unauthenticated attackers to disable donation email notificatio...

CVE-2026-11981

The CVE-2026-11981 entry concerns the WordPress GiveWP plugin (affected: versions up to 4.15.3) with a Cross-Site Request Forgery vulnerability due to missing nonce validation in give_set_notification_status_handler(). This allows unauthenticated attackers to disable donation email notifications ...

CVE-2026-8258

A flaw has been found in Squirrel up to 3.2. Impacted is the function validateformat in the library sqstdlib/sqstdstring.cpp. Executing a manipulation can lead to stack-based buffer overflow. The attack can only be executed locally. The exploit has been published and may be used. The project was...

GHSA-9V2V-JXVW-52RQ

creationtimestamp| type| source ---|---|--- 2025-01-20 15:49:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113861471440807384 2025-01-20 16:01:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2366...

CVE-2025-23661

creationtimestamp| type| source ---|---|--- 2025-01-16 20:18:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv42h5v452n 2025-01-16 23:53:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113840724346527156...

CVE-2024-10789

creationtimestamp| type| source ---|---|--- 2025-01-16 03:28:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113835909092626607 2025-01-16 03:55:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1912 2025-01-16 04:15:31+00:00| seen|...

CVE-2024-12518

creationtimestamp| type| source ---|---|--- 2024-12-24 04:33:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113705931156683699 2024-12-24 04:37:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113705944388003062 2024-12-24 05:15:25+00:00| seen|...