CVE-2025-27298

Cross-Site Request Forgery CSRF vulnerability in cmstactics WP Video Posts wp-video-posts allows OS Command Injection.This issue affects WP Video Posts: from n/a through = 3.5.1...

WordPress Get Posts plugin <= 0.6 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Get Posts versions = 0.6...

WordPress WP Video Posts plugin <= 3.5.1 - CSRF to Remote Code Execution (RCE) vulnerability

CSRF to Remote Code Execution RCE vulnerability discovered by johska in WordPress Plugin WP Video Posts versions = 3.5.1...

CVE-2025-27349 WordPress Get Posts plugin <= 0.6 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nurelm Get Posts nurelm-get-posts allows Stored XSS.This issue affects Get Posts: from n/a through = 0.6...

CVE-2025-27349

CVE-2025-27349 refers to a cross-site scripting (XSS) vulnerability in the WordPress plugin Get Posts . The issue arises from improper input neutralization during web page generation, enabling a Stored XSS condition for affected versions. The vulnerability scope is described as Get Posts: from n/...

CVE-2025-27298

CVE-2025-27298 affects the WordPress plugin WP Video Posts (versions up to 3.5.1). A CSRF vulnerability can lead to Remote Command Execution via OS command injection. Per the documents, the vulnerability is currently Unpatched (no fix version published); PatchStack describes RCE potential, but no...

CVE-2025-27298 WordPress WP Video Posts plugin <= 3.5.1 - CSRF to Remote Code Execution (RCE) vulnerability

Cross-Site Request Forgery CSRF vulnerability in cmstactics WP Video Posts wp-video-posts allows OS Command Injection.This issue affects WP Video Posts: from n/a through = 3.5.1...

CVE-2025-25279

creationtimestamp| type| source ---|---|--- 2025-02-24 09:48:42+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114058233235721938 2025-02-24 10:26:04+00:00| seen| https://t.me/cvedetector/18788 2025-02-24 10:47:50+00:00| seen|...

WordPress plugin WP Video Posts 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

WordPress plugin Get Posts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress plugin wumii-related-posts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2025-7763 · Unknown · Nurelm Get Posts

Name of the Vulnerable Software and Affected Versions: nurelm Get Posts versions 0.6 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a Stored XSS vulnerabilit...

CVE-2025-27112

creationtimestamp| type| source ---|---|--- 2025-02-22 17:14:30+00:00| published-proof-of-concept| https://github.com/navidrome/navidrome/security/advisories/GHSA-c3p4-vm8f-386p 2025-02-24 19:22:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5207 2025-02-24...

CVE-2024-13855

The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.1 via the paeglobalblock shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2025-0728

creationtimestamp| type| source ---|---|--- 2025-02-21 11:25:05+00:00| seen| https://t.me/cvedetector/18637 2025-02-21 11:26:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liop3rgr4g2p 2025-02-21 12:35:18+00:00| seen| Telegram/JmZL6HfJEWDyKx7kicaSOJ8gP19bpGfV75hu0-viSdkUO978...

WordPress WP Video Posts plugin <= 3.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin WP Video Posts versions = 3.5.1...

CVE-2025-24893

creationtimestamp| type| source ---|---|--- 2025-02-20 20:56:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lin6hwckvn2a 2025-02-20 21:48:44+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114038415303555460 2025-02-20 23:12:05+00:00| published-proof-of-concept...

CVE-2024-13753

creationtimestamp| type| source ---|---|--- 2025-02-20 11:49:32+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114036057912346467 2025-02-20 12:41:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3limctgdc5x2y 2025-02-20 13:09:02+00:00| seen|...

CVE-2024-13855

The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.1 via the paeglobalblock shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2024-13855 Prime Addons for Elementor <= 2.0.1 - Authenticated (Contributor+) Insecure Direct Object Reference via pae_global_block Shortcode

The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.1 via the paeglobalblock shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...