PT-2025-52576

Name of the Vulnerable Software and Affected Versions Frontend Post Submission Manager Lite plugin versions through 1.2.5 Description The Frontend Post Submission Manager Lite plugin for WordPress has an issue where authorization checks are missing on the post update functionality within the fpsm...

CVE-2025-12492

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajaxgetmembers function. This is due to the use of a...

CVE-2025-27019

creationtimestamp| type| source ---|---|--- 2025-12-08 10:59:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7husodd2t2j 2025-12-08 13:54:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115684281889620141 2025-12-09 03:53:17+00:00| seen|...

CVE-2025-13631

creationtimestamp| type| source ---|---|--- 2025-12-02 22:54:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6zzxz5ygy26 2025-12-03 08:07:10+00:00| seen| https://gist.github.com/Darkcrai86/bced0ef5a348403be47f49dfc336e88a 2025-12-03 08:56:59+00:00| seen|...

CVE-2025-13765

creationtimestamp| type| source ---|---|--- 2025-11-27 16:28:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ms24ep622k...

CVE-2025-33514

creationtimestamp| type| source ---|---|--- 2025-11-18 12:37:03+00:00| seen| https://bsky.app/profile/ransomnews.online/post/3m5vqvwddxx24...

CVE-2025-64182

creationtimestamp| type| source ---|---|--- 2025-11-08 23:42:25+00:00| published-proof-of-concept| https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-vh63-9mqx-wmjr 2025-11-11 00:20:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5cuibdzc62q...

CVE-2025-48985

creationtimestamp| type| source ---|---|--- 2025-11-07 02:28:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4yzrgjq3626 2025-11-07 04:45:24+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4zbgggbg6j2 2025-11-07 13:45:11+00:00| seen|...

CVE-2025-41338

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'iddenuncia' and 'iduser' in '/backend/api/buscarTestigoByIdDenunciaUsuario.php'...

CVE-2025-62479

creationtimestamp| type| source ---|---|--- 2025-10-21 21:06:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3qacyksr222...

CVE-2025-62695

creationtimestamp| type| source ---|---|--- 2025-10-21 05:17:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3olcld4g62o...

CVE-2025-11857 XX2WP Integration Tools <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

The XX2WP Integration Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mxpfb2wpdisplayembed' shortcode in all versions up to, and including, 1.9.9. This is due to the plugin not properly sanitizing user input and output of the 'postid' parameter. This makes it...

CVE-2025-10850

creationtimestamp| type| source ---|---|--- 2025-10-16 07:33:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3calj2yol2m 2025-10-16 09:38:42+00:00| seen| https://gist.github.com/Darkcrai86/a287422624b245f6aa5d6ac90d534eb1 2026-04-08 23:32:00+00:00| seen|...

EUVD-2023-0303

Malicious code in bioql PyPI...

EUVD-2024-37918

Malicious code in bioql PyPI...

CVE-2025-9073

The All in one Minifier plugin for WordPress is vulnerable to SQL Injection via the 'postid' parameter in all versions up to, and including, 3.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-9073 All in one Minifier <= 3.2 - Unauthenticated SQL Injection

The All in one Minifier plugin for WordPress is vulnerable to SQL Injection via the 'postid' parameter in all versions up to, and including, 3.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-9073

CVE-2025-9073: All in one Minifier (WordPress)

PT-2025-37140

Name of the Vulnerable Software and Affected Versions: All in one Minifier plugin for WordPress versions prior to 3.3 Description: The All in one Minifier plugin for WordPress is susceptible to SQL Injection due to insufficient escaping of the post id parameter and inadequate preparation of...

CVE-2025-54494

creationtimestamp| type| source ---|---|--- 2025-08-26 03:01:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxbjm5pxmh23 2025-08-26 06:00:33+00:00| seen| https://infosec.place/objects/b2da2ec8-4c53-4b1c-895a-87a06d68df32...