7958 matches found
CVE-2025-68509
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Jeff Starr User Submitted Posts user-submitted-posts allows Phishing.This issue affects User Submitted Posts: from n/a through = 20251121...
WordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by MD ISMAIL in WordPress Plugin Custom Related Posts versions = 1.8.0...
WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Responsive Posts Carousel Pro versions = 15.1...
PT-2026-1268
Name of the Vulnerable Software and Affected Versions Brecht Custom Related Posts versions through 1.8.0 Description A flaw exists in Brecht Custom Related Posts that allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations Upda...
CVE-2019-25240
creationtimestamp| type| source ---|---|--- 2025-12-24 21:02:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar5wtnhaa22 2025-12-24 21:48:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3marajsujz52f...
CVE-2019-25235
creationtimestamp| type| source ---|---|--- 2025-12-24 20:55:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar5jss25h22 2025-12-24 21:07:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar6ae7uot2y...
CVE-2019-25243
creationtimestamp| type| source ---|---|--- 2025-12-24 20:25:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3v75iw32t 2025-12-24 20:26:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3vxv4mh2g...
CVE-2019-25249
creationtimestamp| type| source ---|---|--- 2025-12-24 20:25:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3uxll7s2b 2025-12-24 20:25:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3vq4pwh2a 2025-12-24 21:58:45+00:00| seen|...
CVE-2025-68916
creationtimestamp| type| source ---|---|--- 2025-12-24 20:25:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3upvdpi27 2025-12-24 20:25:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3vias7y2m 2025-12-24 21:19:20+00:00| seen|...
EUVD-2025-205206
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Jeff Starr User Submitted Posts user-submitted-posts allows Phishing.This issue affects User Submitted Posts: from n/a through = 20251121...
CVE-2025-68509
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Jeff Starr User Submitted Posts user-submitted-posts allows Phishing.This issue affects User Submitted Posts: from n/a through = 20251121...
CVE-2025-68548
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Stored XSS.This issue affects Responsive Posts Carousel Pro: from n/a through = 15.2...
CVE-2025-68509 WordPress User Submitted Posts plugin <= 20251121 - Open Redirection vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Jeff Starr User Submitted Posts user-submitted-posts allows Phishing.This issue affects User Submitted Posts: from n/a through = 20251121...
CVE-2025-68509 WordPress User Submitted Posts plugin <= 20251121 - Open Redirection vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Jeff Starr User Submitted Posts user-submitted-posts allows Phishing.This issue affects User Submitted Posts: from n/a through = 20251121...
CVE-2025-68509
CVE-2025-68509 affects the WordPress plugin User Submitted Posts . The reported issue is an unauthenticated Open Redirect flaw caused by insufficient validation of the redirect-override parameter, allowing attackers to redirect users to untrusted sites and facilitate phishing. Affected versions a...
CVE-2025-14163
The Premium Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.11.53. This is due to missing nonce validation in the 'insertinnertemplate' function. This makes it possible for unauthenticated attackers to create arbitrary...
CVE-2025-13767 Unauthorized Read Access to Private Channel Posts via Mattermost Jira Plugin
Mattermost versions 11.1.x = 11.1.0, 11.0.x = 11.0.5, 10.12.x = 10.12.3, 10.11.x = 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with access to the Jira plugin to read post content and attachmen...
CVE-2025-13767 Unauthorized Read Access to Private Channel Posts via Mattermost Jira Plugin
Mattermost versions 11.1.x = 11.1.0, 11.0.x = 11.0.5, 10.12.x = 10.12.3, 10.11.x = 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with access to the Jira plugin to read post content and attachmen...
CVE-2025-13767
Mattermost Jira plugin vulnerability (CVE-2025-13767): versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x
CVE-2025-13767 Unauthorized Read Access to Private Channel Posts via Mattermost Jira Plugin
Mattermost versions 11.1.x = 11.1.0, 11.0.x = 11.0.5, 10.12.x = 10.12.3, 10.11.x = 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with access to the Jira plugin to read post content and attachmen...