CVE-2025-60244

CVE-2025-60244 concerns a Basic XSS in the WordPress TableOn plugin (RealMag777 TableOn posts-table-filterable) caused by improper neutralization of script-related HTML tags, enabling code injection. Affected versions are TableOn <= 1.0.4.2 (per initial sources); later entries also reference

CVE-2025-64473

creationtimestamp| type| source ---|---|--- 2025-11-06 06:45:50+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4wxo4d7gqd2 2025-11-06 07:47:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4x35jpwfy2n...

PT-2025-45285

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through = 1.0.4.2...

CVE-2025-60244: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

CVE-2025-12192

creationtimestamp| type| source ---|---|--- 2025-11-05 12:37:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4v2vuqmqd2q 2025-11-05 13:01:38+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4v46hbihcp2...

CVE-2025-43455

creationtimestamp| type| source ---|---|--- 2025-11-05 12:06:48+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4uz4iazgdu2 2025-11-05 12:40:22+00:00| seen| https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3m4v2yocp7nv2...

CVE-2025-43442

creationtimestamp| type| source ---|---|--- 2025-11-05 12:06:48+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4uz4iazgdu2 2025-11-05 12:40:22+00:00| seen| https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3m4v2yocp7nv2...

CVE-2025-12674

creationtimestamp| type| source ---|---|--- 2025-11-05 09:01:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4uot2g3672s 2025-11-05 09:37:05+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4uqq2z2xyc2 2025-11-05 09:40:49+00:00| seen|...

CVE-2025-11162

creationtimestamp| type| source ---|---|--- 2025-11-05 06:20:58+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4uftfpq75w2 2025-11-05 06:56:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4uhttd6es2k...

CVE-2025-12156

The Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savepostdata function in versions 2.0.7 to 2.2.6. This makes it possible for authenticated attackers, with...

CVE-2025-64106

creationtimestamp| type| source ---|---|--- 2025-11-05 01:11:25+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4tuj2mno4x2 2025-11-05 01:32:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4tvpvvdnk2k...

CVE-2025-62719

creationtimestamp| type| source ---|---|--- 2025-11-05 01:11:05+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4tuitk5n542 2025-11-05 01:46:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4twjix6hp2k...

WordPress List category posts plugin information leakage vulnerability

WordPress List category posts plugin is a tool in WordPress for outputting specified category posts in a customized order. WordPress List category posts plugin suffers from an information disclosure vulnerability that stems from an insufficient catlist shortcode restriction, which can be exploite...

CVE-2025-39973

creationtimestamp| type| source ---|---|--- 2025-11-04 13:43:54+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m4so4who5u2e 2025-11-04 13:44:08+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m4so5eagu72c 2025-11-07 03:34:24+00:00| seen|...

CVE-2025-20749

creationtimestamp| type| source ---|---|--- 2025-11-04 08:46:13+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4s5i7avwfe2 2025-11-04 09:42:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4sanpfyyb2k...

CVE-2025-20747

creationtimestamp| type| source ---|---|--- 2025-11-04 08:46:01+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4s5hlntsnx2 2025-11-04 09:45:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4sas6rxmp2n...

CVE-2025-11563

creationtimestamp| type| source ---|---|--- 2025-11-04 07:44:19+00:00| seen| https://seclists.org/oss-sec/2025/q4/127 2025-11-04 08:43:16+00:00| seen| https://mastodon.social/users/bagder/statuses/115490540139486022 2025-11-04 08:43:29+00:00| seen|...

WordPress Posts Navigation Links for Sections and Headings plugin <= 1.0.1 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Posts Navigation Links for Sections and Headings versions = 1.0.1...

CVE-2025-12188 Posts Navigation Links for Sections and Headings - Free by WP Masters <= 1.0.1 - Cross-Site Request Forgery to Settings Update

The Posts Navigation Links for Sections and Headings – Free by WP Masters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the 'wpmnavigationlinkssettings' page. This makes it...

PT-2025-44946

The Posts Navigation Links for Sections and Headings – Free by WP Masters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the 'wpm navigation links settings' page. This makes it...