CVE-2025-32148

creationtimestamp| type| source ---|---|--- 2025-04-04 17:48:17+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114280949060615660 2025-04-04 17:48:17+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114280949060615660 2025-04-04 20:01:41+00:00| seen|...

CVE-2025-32233

Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through = 2.0.3...

CVE-2025-32130

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Posts Footer Manager intelly-posts-footer-manager allows Stored XSS.This issue affects Posts Footer Manager: from n/a through = 2.2.0...

CVE-2025-32218

Technical details for CVE-2025-32218 are not provided in the supplied documents. No affected product/version, impact, or fix details are available here. Monitor for updates from vendors and CVE databases.

CVE-2025-27520

creationtimestamp| type| source ---|---|--- 2025-04-04 00:59:47+00:00| published-proof-of-concept| https://github.com/bentoml/BentoML/security/advisories/GHSA-33xw-247w-6hmc 2025-04-04 15:15:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114280346981280788 2025-04-04 15:15:09+00:00|...

CVE-2025-32130: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Posts Footer Manager intelly-posts-footer-manager allows Stored XSS.This issue affects Posts Footer Manager: from n/a through = 2.2.0...

WordPress plugin Posts Footer Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-14921 · Data443 Risk Mitigation · Posts Footer Manager

Name of the Vulnerable Software and Affected Versions: Data443 Risk Migitation, Inc. Posts Footer Manager versions n/a through 2.2.0 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. Specifically, it is a Stor...

CVE-2025-32218: Missing Authorization

Missing Authorization vulnerability in RealMag777 TableOn posts-table-filterable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TableOn: from n/a through = 1.0.5.1...

CVE-2025-30406

creationtimestamp| type| source ---|---|--- 2025-04-03 19:35:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10326 2025-04-03 21:06:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llwsmf36672w 2025-04-03 23:36:28+00:00| seen| https://t.me/cvedetector/22026 2025-04-04...

CVE-2025-31891

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gosign Gosign – Posts Slider Block gosign-posts-slider-block allows Stored XSS.This issue affects Gosign – Posts Slider Block: from n/a through = 1.1.0...

CVE-2025-22457

creationtimestamp| type| source ---|---|--- 2025-04-03 14:22:18+00:00| seen| https://bsky.app/profile/rcinghio.bsky.social/post/3llw3znpsvc2d 2025-04-03 14:24:04+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus9/2025 2025-04-03 14:38:36+00:00| seen|...

CERTFR-2025-DUR-002

creationtimestamp| type| source ---|---|--- 2025-04-03 14:00:26+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114274390860514676 2025-04-03 14:00:26+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114274390860514676 2025-04-03 14:00:26+00:00| seen|...

CERTFR-2025-DUR-001

creationtimestamp| type| source ---|---|--- 2025-04-03 14:00:21+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3llw2sgb23i2s 2025-04-03 14:00:22+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114274390555274356 2025-04-03 14:00:22+00:00| seen|...

CVE-2025-2946

creationtimestamp| type| source ---|---|--- 2025-04-03 13:27:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114274261341230556 2025-04-03 13:27:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114274261341230556 2025-04-03 13:40:15+00:00| seen|...

CVE-2025-2945

creationtimestamp| type| source ---|---|--- 2025-04-03 12:35:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10196 2025-04-03 13:27:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114274261341230556 2025-04-03 13:27:29+00:00| seen|...

CVE-2025-2874 User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 20240319 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2025-31334

creationtimestamp| type| source ---|---|--- 2025-04-03 05:36:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10162 2025-04-03 07:06:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llvdot4ddp2i 2025-04-03 08:06:50+00:00| seen|...

PT-2025-14601 · WordPress · User Submitted Posts

Name of the Vulnerable Software and Affected Versions: User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress versions up to, and including, 20240319 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input...

CVE-2025-2874: Improper Neutralization of Input During Web Page Generation

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 20240319 due to insufficient input sanitization and output escaping. This makes it possible for...