WordPress plugin LifterLMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CERTFR-2025-ACT-011

creationtimestamp| type| source ---|---|--- 2025-03-17 14:17:36+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114178198997319032 2025-03-17 14:17:36+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lkldtl2fgz2u 2025-03-17 14:51:15+00:00| seen|...

CVE-2024-13407

The Omnipress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.5.4 via the megamenu block due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above,...

CVE-2025-23744

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dvs11 Random Posts, Mp3 Player + ShareButton random-posts-mp3-player-sharebutton allows Reflected XSS.This issue affects Random Posts, Mp3 Player + ShareButton: from n/a through = 1.4.1...

WordPress plugin Random Posts, Mp3 Player + ShareButton 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPre...

GHSA-RWP7-7VC6-8477

creationtimestamp| type| source ---|---|--- 2025-03-14 18:23:01+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pding2d 2025-04-04 18:18:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114281067875557615 2025-04-04 18:18:29+00:00| seen|...

OESA-2025-1272 python-aiohttp security update

Async http client/server framework asyncio. Security Fixes: aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option...

CVE-2025-27593

creationtimestamp| type| source ---|---|--- 2025-03-14 13:40:24+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdqed7b472v 2025-03-14 13:47:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7549 2025-03-14 13:48:24+00:00| seen|...

CVE-2024-13771

creationtimestamp| type| source ---|---|--- 2025-03-14 12:40:10+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdmymtmnl2g 2025-03-14 13:48:23+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114161097294048919 2025-03-14 13:55:59+00:00| seen|...

CVE-2024-13407

The Omnipress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.5.4 via the megamenu block due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above,...

CVE-2024-13824

creationtimestamp| type| source ---|---|--- 2025-03-14 07:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkd4agt2de2u 2025-03-14 07:48:37+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114159682521234713 2025-03-14 09:45:46+00:00| seen|...

CVE-2024-13407

CVE-2024-13407 (Omnipress WordPress plugin) affects Omnipress plugin versions up to and including 1.5.4. The vulnerability is information exposure via the megamenu block, caused by insufficient restrictions on which posts can be included. An authenticated attacker with Contributor level access or...

CVE-2025-1736

creationtimestamp| type| source ---|---|--- 2025-03-14 06:25:41+00:00| seen| https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27 2025-03-14 18:23:03+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pp6o62d 2025-03-18 07:25:13+00:00| seen|...

CVE-2025-1861

creationtimestamp| type| source ---|---|--- 2025-03-14 06:25:41+00:00| seen| https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27 2025-03-14 18:23:03+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pp6o62d 2025-03-18 07:25:13+00:00| seen|...

CVE-2025-1217

creationtimestamp| type| source ---|---|--- 2025-03-14 06:25:41+00:00| seen| https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27 2025-03-17 12:32:28+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lkl5xmdc4s2p 2025-03-18 07:25:12+00:00| seen|...

CVE-2025-1734

creationtimestamp| type| source ---|---|--- 2025-03-14 06:25:41+00:00| seen| https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27 2025-03-14 18:23:04+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pvarj26 2025-03-17 12:32:28+00:00| seen|...

CVE-2024-11284

creationtimestamp| type| source ---|---|--- 2025-03-14 04:53:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7526 2025-03-14 05:40:18+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkcvjuanhc2n 2025-03-14 05:48:25+00:00| seen|...

WordPress plugin Omnipress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2025-28905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chaser324 Featured Posts Grid featured-posts-grid allows Stored XSS.This issue affects Featured Posts Grid: from n/a through = 1.7...

CVE-2025-22954

creationtimestamp| type| source ---|---|--- 2025-03-13 03:44:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7392 2025-03-13 05:48:24+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114153547594880534 2025-03-17 07:43:58+00:00| seen|...