Mattermost Server 10.5.x < 10.5.9 / 10.10.0 Incorrect Authorization (MMSA-2025-00470)

The version of Mattermost Server installed on the remote host is affected by a vulnerability as referenced in the MMSA-2025-00470 advisory. - Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts CVE-2025-49810 Note...

CVE-2020-36732

creationtimestamp| type| source ---|---|--- 2025-09-10 20:15:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3lyj2dsk7fz2s 2025-09-10 21:10:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3lyj5g4uhge2o...

CVE-2025-10155

creationtimestamp| type| source ---|---|--- 2025-09-10 19:51:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jgw4-cr84-mqxg 2025-09-17 10:31:59+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyzmzk6thf2o 2025-09-17 11:32:14+00:00| seen|...

CVE-2025-9943

creationtimestamp| type| source ---|---|--- 2025-09-10 08:01:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyhre4bny42r 2025-09-10 08:46:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyhttvtwpt2r...

CVE-2025-41714

creationtimestamp| type| source ---|---|--- 2025-09-10 07:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyhnxzdtqy2a 2025-09-10 07:04:34+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lyho3enfaig2 2025-09-10 11:01:34+00:00| seen|...

CVE-2025-8388

creationtimestamp| type| source ---|---|--- 2025-09-10 05:00:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyhhbbhzhb2r 2025-09-10 05:01:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyhhc73eyw2y...

CVE-2025-55234

creationtimestamp| type| source ---|---|--- 2025-09-09 16:22:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0277 2025-09-09 17:06:15+00:00| seen| https://www.thezdi.com/blog/2025/9/9/the-september-2025-security-update-review 2025-09-09 19:21:14+00:00| seen|...

GHSA-W62P-HX95-GF2C

creationtimestamp| type| source ---|---|--- 2025-09-09 10:49:30+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3lyfkbk7n722s 2025-09-09 11:00:04+00:00| seen| https://bsky.app/profile/hnbot.gsuscs.xyz/post/3lyfkufubzs2e 2025-09-09 11:17:36+00:00| seen|...

CVE-2025-58746

creationtimestamp| type| source ---|---|--- 2025-09-09 00:01:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyeg2tstqh22 2025-09-09 01:18:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyekeuvbel2t...

CVE-2025-53838

creationtimestamp| type| source ---|---|--- 2025-09-08 22:56:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyecgkenjs2l 2025-09-08 23:28:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyeea22c6h2r...

CVE-2025-36854

creationtimestamp| type| source ---|---|--- 2025-09-08 15:20:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydixmqfrc2r 2025-09-08 15:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydjjjmrkh2r 2025-09-08 15:53:16+00:00| seen| https://t.me/canyoupwnme/6960...

CVE-2025-36855

creationtimestamp| type| source ---|---|--- 2025-09-08 15:11:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydigyqxqj2d 2025-09-08 15:15:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydiood4vf2l 2025-09-08 15:53:15+00:00| seen| https://t.me/canyoupwnme/6959...

CVE-2025-5993

creationtimestamp| type| source ---|---|--- 2025-09-08 12:55:18+00:00| seen| https://t.me/canyoupwnme/6946 2025-09-08 12:55:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydauq2m2x2r 2025-09-08 13:15:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydbyjpfui26...

CVE-2025-6757

The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rpwe' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-7368

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajaxactionregetfullcontent' function due to insufficient restrictions on which posts can be included. This makes i...

CVE-2025-6757

The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rpwe' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-6757 Recent Posts Widget Extended <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode

The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rpwe' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-6757

CVE-2025-6757 – Recent Posts Widget Extended (WordPress) The vulnerability is in the Recent Posts Widget Extended plugin for WordPress, affecting versions up to and including 2.0.2. It is a Stored Cross-Site Scripting (XSS) flaw in the plugin’s rpwe shortcode caused by insufficient input sanitiza...

CVE-2025-6757 Recent Posts Widget Extended <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode

The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rpwe' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-7368

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajaxactionregetfullcontent' function due to insufficient restrictions on which posts can be included. This makes i...