CVE-2025-3786

creationtimestamp| type| source ---|---|--- 2025-04-18 09:59:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12413 2025-04-18 11:15:19+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3ikuqwlji2 2025-04-18...

CVE-2025-42599

creationtimestamp| type| source ---|---|--- 2025-04-18 03:57:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12386 2025-04-18 04:48:42+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114357156027593391 2025-04-18 06:23:52+00:00| seen|...

NamelessMC 资源管理错误漏洞

NamelessMC is a free, easy to use and powerful website software from the NamelessMC team. For your Minecraft server, which contains tons of features. A resource management error vulnerability exists in NamelessMC 2.1.4 and earlier versions, which stems from forums that allow the posting of...

CVE-2025-27308

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cmstactics WP Video Posts wp-video-posts allows Reflected XSS.This issue affects WP Video Posts: from n/a through = 3.5.1...

CVE-2025-23773

Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Delete All Posts: through 1.1.1...

CVE-2025-23773

Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Delete All Posts: through 1.1.1...

CVE-2025-23773 WordPress Delete All Posts plugin <= 1.1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Delete All Posts: through 1.1.1...

CVE-2025-23773

CVE-2025-23773 concerns the WordPress Delete All Posts plugin (mingocommerce) with versions n/a–1.1.1, where a Missing Authorization vulnerability stems from incorrectly configured access control. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) indicates no network privileges required, ...

CVE-2025-27308 WordPress WP Video Posts plugin <= 3.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cmstactics WP Video Posts wp-video-posts allows Reflected XSS.This issue affects WP Video Posts: from n/a through = 3.5.1...

PT-2025-17063 · WordPress · Wp Video Posts

Name of the Vulnerable Software and Affected Versions: WP Video Posts versions 3.5.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject...

GHSA-37CP-FGQ5-7WC2

creationtimestamp| type| source ---|---|--- 2025-04-16 22:57:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12169 2025-04-16 23:34:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114350256396276490 2025-04-17 17:27:07+00:00| seen|...

CVE-2025-32856

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxaptslt22a 2025-04-16 20:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605608981550 2025-04-16 21:55:10+00:00| seen|...

CVE-2025-32859

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxapswj3t2z 2025-04-16 20:48:36+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605703951184 2025-04-16 21:55:12+00:00| seen|...

CVE-2025-31201

creationtimestamp| type| source ---|---|--- 2025-04-16 17:33:03+00:00| seen| https://infosec.exchange/users/applsec/statuses/114348836934305541 2025-04-16 17:33:04+00:00| seen| https://bsky.app/profile/applsec.bsky.social/post/3lmx4qr3utx2e 2025-04-16 18:18:24+00:00| seen|...

CVE-2025-31200

creationtimestamp| type| source ---|---|--- 2025-04-16 17:33:02+00:00| seen| https://infosec.exchange/users/applsec/statuses/114348836934305541 2025-04-16 17:33:04+00:00| seen| https://bsky.app/profile/applsec.bsky.social/post/3lmx4qr3utx2e 2025-04-16 18:18:24+00:00| seen|...

CVE-2025-9001

creationtimestamp| type| source ---|---|--- 2025-04-16 16:53:23+00:00| seen| at://did:web:em.vg/app.bsky.feed.post/3lmx2jrwssk23 2025-04-17 02:14:20+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lmxzutzcrl2w 2025-04-18 02:12:38+00:00| seen|...

CVE-2025-39573

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.10...

CVE-2025-39549

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in whiletrue Most And Least Read Posts Widget most-and-least-read-posts-widget allows Stored XSS.This issue affects Most And Least Read Posts Widget: from n/a through = 2.5.20...

CVE-2025-39549 WordPress Most And Least Read Posts Widget plugin <= 2.5.20 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in whiletrue Most And Least Read Posts Widget most-and-least-read-posts-widget allows Stored XSS.This issue affects Most And Least Read Posts Widget: from n/a through = 2.5.20...

CVE-2025-39549

CVE-2025-39549 describes a Stored XSS vulnerability in the WordPress plugin Most And Least Read Posts Widget . Technical detail from sources confirms the issue affects versions “n/a through 2.5.20” and arises from improper input neutralization during web page generation. Exploitation details or o...