CVE-2025-31891 WordPress Gosign – Posts Slider Block plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gosign Gosign – Posts Slider Block allows Stored XSS. This issue affects Gosign – Posts Slider Block: from n/a through 1.1.0...

CVE-2025-31182

creationtimestamp| type| source ---|---|--- 2025-04-01 03:35:28+00:00| seen| https://t.me/cvedetector/21693 2025-04-01 19:58:07+00:00| seen| https://bsky.app/profile/supernetworks.bsky.social/post/3llrnubwmqk2b 2025-04-01 19:59:54+00:00| seen|...

CVE-2025-30065

creationtimestamp| type| source ---|---|--- 2025-04-01 02:51:25+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3llpuigur7q2k 2025-04-01 08:32:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9867 2025-04-01 08:40:24+00:00| seen|...

PT-2025-14266 · Unknown · Gosign – Posts Slider Block

Name of the Vulnerable Software and Affected Versions: Gosign – Posts Slider Block versions 1.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers...

CVE-2025-3048

creationtimestamp| type| source ---|---|--- 2025-03-31 15:31:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9675 2025-03-31 16:40:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114258034481176074 2025-03-31 16:40:47+00:00| seen|...

CVE-2025-3047

creationtimestamp| type| source ---|---|--- 2025-03-31 15:31:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9676 2025-03-31 16:40:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114258034481176074 2025-03-31 16:40:47+00:00| seen|...

WordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Related Posts Widget with Thumbnails versions = 1.2...

WordPress wordpress related Posts with thumbnails plugin <= 3.0.0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin wordpress related Posts with thumbnails versions = 3.0.0.1...

CVE-2025-31570

Cross-Site Request Forgery CSRF vulnerability in wp-buy Related Posts Widget with Thumbnails advanced-css3-related-posts-widget allows Stored XSS.This issue affects Related Posts Widget with Thumbnails: from n/a through = 1.2...

CVE-2025-31570 WordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in wp-buy Related Posts Widget with Thumbnails advanced-css3-related-posts-widget allows Stored XSS.This issue affects Related Posts Widget with Thumbnails: from n/a through = 1.2...

CVE-2025-31570

CVE-2025-31570 involves a CSRF to Stored XSS in the WordPress plugin “Related Posts Widget with Thumbnails” (listed as Advanced CSS3 Related Posts Widget). Public description states the issue affects the plugin from version n/a up to 1.2, implying all releases ≤1.2 are affected. The CVSS metrics ...

CVE-2025-31125

creationtimestamp| type| source ---|---|--- 2025-03-31 10:12:27+00:00| published-proof-of-concept| https://github.com/vitejs/vite/security/advisories/GHSA-4r4m-qw57-chr8 2025-03-31 17:30:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9702 2025-03-31 21:43:14+00:00|...

CVE-2025-2966

creationtimestamp| type| source ---|---|--- 2025-03-31 00:33:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9561 2025-03-31 03:17:35+00:00| seen| https://t.me/cvedetector/21527 2025-08-23 14:58:27+00:00| seen|...

CVE-2025-30223

creationtimestamp| type| source ---|---|--- 2025-03-30 11:27:47+00:00| published-proof-of-concept| https://github.com/beego/beego/security/advisories/GHSA-2j42-h78h-q4fg 2025-03-31 16:33:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9693 2025-03-31 17:40:22+00:00|...

CVE-2025-31094

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.8...

CVE-2025-30920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.7...

CVE-2025-29928

creationtimestamp| type| source ---|---|--- 2025-03-28 17:45:17+00:00| seen| https://t.me/cvedetector/21438 2025-03-29 12:02:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114245613865183165 2025-03-29 12:02:03+00:00| seen|...

WordPress WP Posts Carousel plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by astra.r3verii in WordPress Plugin WP Posts Carousel versions = 1.3.8...

CVE-2025-31094

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.8...

CVE-2025-31094

CVE-2025-31094 affects WP Posts Carousel (WordPress plugin). Affected versions: up to 1.3.8. Type of vulnerability: Stored Cross-Site Scripting due to improper input neutralization during web page generation. Impact: enables attacker to execute scripts in a user’s browser when visiting crafted pa...