WordPress Plugin ACF Recent Posts Widget Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin ACF Recent Posts Widget, no...

CVE-2025-4665

creationtimestamp| type| source ---|---|--- 2025-10-29 01:31:47+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4ccgbrqfi23 2025-10-29 01:41:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ccxhx6zg24 2025-10-29 07:58:12+00:00| seen|...

CVE-2025-9152

creationtimestamp| type| source ---|---|--- 2025-10-28 07:28:27+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3m4afurktde2g 2025-10-28 07:39:32+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3m4agixqihf2d 2025-11-05 22:12:41+00:00| seen|...

CVE-2025-62905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Tadlock Query Posts query-posts allows Stored XSS.This issue affects Query Posts: from n/a through = 0.3.2...

CVE-2025-62958

Cross-Site Request Forgery CSRF vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts & Pages: from n/a through = 2.2.61...

CVE-2025-62954

Missing Authorization vulnerability in rsocial Revive Old Posts tweet-old-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive Old Posts: from n/a through = 9.3.3...

CVE-2025-62983

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sudar Muthu Posts By Tag posts-by-tag allows Stored XSS.This issue affects Posts By Tag: from n/a through = 3.2.1...

CVE-2025-62894

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in magicoders ACF Recent Posts Widget acf-recent-posts-widget allows Stored XSS.This issue affects ACF Recent Posts Widget: from n/a through = 5.9.3...

CVE-2025-62900

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Popular Posts by Webline popular-posts-by-webline allows Stored XSS.This issue affects Popular Posts by Webline: from n/a through = 1.1.1...

CVE-2025-12322

creationtimestamp| type| source ---|---|--- 2025-10-27 21:13:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115448191522686837 2025-10-27 22:15:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m47gxsjtxl2g...

CVE-2025-61795

creationtimestamp| type| source ---|---|--- 2025-10-27 18:13:45+00:00| seen| https://seclists.org/oss-sec/2025/q4/77 2025-10-27 19:02:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4747uh2g32p 2025-10-27 19:33:15+00:00| seen|...

CVE-2025-55754

creationtimestamp| type| source ---|---|--- 2025-10-27 17:59:31+00:00| seen| https://seclists.org/oss-sec/2025/q4/76 2025-10-27 19:08:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m474k4x55b2g 2025-10-27 19:43:18+00:00| seen|...

CVE-2025-55752

creationtimestamp| type| source ---|---|--- 2025-10-27 17:51:36+00:00| seen| https://seclists.org/oss-sec/2025/q4/75 2025-10-27 19:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m474q3zn6m23 2025-10-27 19:28:14+00:00| seen|...

WordPress Create Posts & Terms plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Create Posts & Terms versions = 1.3.1...

EUVD-2025-35962

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sudar Muthu Posts By Tag posts-by-tag allows Stored XSS.This issue affects Posts By Tag: from n/a through = 3.2.1...

EUVD-2025-35988

Missing Authorization vulnerability in Codeinwp Revive Old Posts tweet-old-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive Old Posts: from n/a through = 9.3.3...

EUVD-2025-35985

Cross-Site Request Forgery CSRF vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts & Pages: from n/a through = 2.2.61...

EUVD-2025-36034

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Tadlock Query Posts query-posts allows Stored XSS.This issue affects Query Posts: from n/a through = 0.3.2...

EUVD-2025-36038

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Popular Posts by Webline popular-posts-by-webline allows Stored XSS.This issue affects Popular Posts by Webline: from n/a through = 1.1.1...

EUVD-2025-36044

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in magicoders ACF Recent Posts Widget acf-recent-posts-widget allows Stored XSS.This issue affects ACF Recent Posts Widget: from n/a through = 5.9.3...