WordPress Custom Posts Order Plugin <= 4.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

CSRF to Stored Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Custom Posts Order versions = 4.4...

PT-2025-15812 · Unknown · Hiren Patel Custom Posts Order

Name of the Vulnerable Software and Affected Versions: Hiren Patel Custom Posts Order versions through 4.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions through 4.4, update to a version that includes a fix for this...

WordPress plugin Custom Posts Order 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2025-30215

creationtimestamp| type| source ---|---|--- 2025-04-08 21:24:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lmdfwoy3tt2z 2025-04-15 19:49:11+00:00| published-proof-of-concept| https://github.com/nats-io/nats-server/security/advisories/GHSA-fhg8-qxh5-7q3w 2025-04-16...

CVE-2025-30282

creationtimestamp| type| source ---|---|--- 2025-04-08 21:22:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftwjyg22z 2025-04-08 21:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmdgtka3gk2y 2025-04-08 21:48:50+00:00| seen|...

CVE-2025-24446

creationtimestamp| type| source ---|---|--- 2025-04-08 21:22:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftvwoas2z 2025-04-08 21:40:18+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmdgtgtcw32c 2025-04-08 21:48:47+00:00| seen|...

CVE-2024-50565

creationtimestamp| type| source ---|---|--- 2025-04-08 17:22:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmcygflyel2g 2025-04-08 18:11:06+00:00| seen| https://t.me/cvedetector/22469 2025-04-09 19:40:44+00:00| seen| https://t.me/truesecator/6929 2025-04-10 13:53:44+00:00| seen...

CVE-2025-32028

creationtimestamp| type| source ---|---|--- 2025-04-08 16:46:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10954 2025-04-08 17:40:20+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmczgetxro2h 2025-04-08 17:48:13+00:00| seen|...

CVE-2025-25226

creationtimestamp| type| source ---|---|--- 2025-04-08 16:46:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10941 2025-04-08 19:51:35+00:00| seen| https://t.me/cvedetector/22486 2025-04-11 06:15:15+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3lmjek4bewb2j 2025-04-11...

CVE-2025-29824

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 17:45:16+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmczp72twd2o 2025-04-08 17:46:24+00:00| seen|...

CVE-2024-48887

creationtimestamp| type| source ---|---|--- 2025-04-08 15:53:00+00:00| seen| https://thehackernews.com/2025/04/fortinet-urges-fortiswitch-upgrades-to.html 2025-04-08 17:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmczgcbtcy2e 2025-04-08 19:08:09+00:00| seen|...

CVE-2025-31498

creationtimestamp| type| source ---|---|--- 2025-04-08 13:18:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lmcks5r5in2l 2025-04-08 17:22:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmcygf2jk52q 2025-04-08 18:10:50+00:00| seen|...

CVE-2025-31651

creationtimestamp| type| source ---|---|--- 2025-04-08 11:00:06+00:00| published-proof-of-concept| Telegram/ZxsIaa5eZFUaiSvD4DlOA2nuaXeqbYgdUu5BG2utsXAUqUs 2025-04-28 17:45:13+00:00| seen| https://seclists.org/oss-sec/2025/q2/101 2025-04-28 19:48:23+00:00| seen|...

CVE-2024-41793

creationtimestamp| type| source ---|---|--- 2025-04-08 08:46:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10879 2025-04-08 08:46:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10880 2025-04-08 11:48:21+00:00| seen|...

CVE-2025-3363

creationtimestamp| type| source ---|---|--- 2025-04-08 02:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmbh4xugyi2c 2025-04-08 02:45:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10816 2025-04-08 03:48:16+00:00| seen|...

CVE-2025-32101

creationtimestamp| type| source ---|---|--- 2025-04-07 15:43:12+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lmacfz7k7i26 2025-04-07 17:39:32+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3lmaivzqr2u2l 2025-04-09 10:42:31+00:00| confirmed|...

CVE-2025-31344

creationtimestamp| type| source ---|---|--- 2025-04-07 14:53:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lma7nqcnma2q 2025-04-07 15:38:52+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lmac6ambfu2j 2025-04-07 16:18:53+00:00| seen|...

CERTFR-2025-ACT-014

creationtimestamp| type| source ---|---|--- 2025-04-07 12:06:48+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lm7wd2lea52r 2025-04-07 12:06:49+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114296593272887332 2025-04-07 14:37:06+00:00| seen|...

CVE-2024-11859

creationtimestamp| type| source ---|---|--- 2025-04-07 08:44:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10689 2025-04-07 10:31:50+00:00| seen| https://poliverso.org/objects/0477a01e-1255bab0-c1a74ebdb4867353 2025-04-07 11:07:53+00:00| seen|...

Unauthorized Access

pixelfed/pixelfed is vulnerable to Unauthorized Access. The vulnerability is due to insufficient verification of follow requests, allowing unauthorized users to access private posts across Fediverse servers...