CVE-2025-0430

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-04 2025-01-17 17:41:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113844925428063721 2025-01-17 17:57:24+00:00| seen|...

CVE-2024-45385

creationtimestamp| type| source ---|---|--- 2025-01-14 10:32:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113826249828255649 2025-01-14 10:36:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113826265616304136 2025-01-14 11:08:27+00:00| seen|...

CVE-2024-12398

creationtimestamp| type| source ---|---|--- 2025-01-14 02:08:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1451 2025-01-14 02:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo6lt7ovy2b 2025-01-14 02:48:14+00:00| seen|...

CVE-2023-42225

creationtimestamp| type| source ---|---|--- 2025-01-13 22:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfnr64c2ip2n 2025-01-14 13:20:32+00:00| seen| https://bsky.app/profile/gothburz.bsky.social/post/3lfpdqhldgx27...

RHSA-2024:5951

creationtimestamp| type| source ---|---|--- 2025-01-13 21:12:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1393 2025-02-25 08:25:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5260...

CVE-2024-12566

creationtimestamp| type| source ---|---|--- 2025-01-13 06:05:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113819537157281010 2025-01-13 06:06:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1353 2025-01-13 06:10:26+00:00| seen|...

CVE-2025-22777

creationtimestamp| type| source ---|---|--- 2025-01-12 02:00:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lfj4t5mkxy2m 2025-01-12 04:06:22+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lfjdtjnyzk27 2025-01-12 05:12:37+00:00| seen|...

CVE-2025-0390

creationtimestamp| type| source ---|---|--- 2025-01-11 08:03:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1277 2025-01-11 08:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbdrigop2e 2025-01-11 08:49:06+00:00| seen|...

CVE-2024-12116

The CVE-2024-12116 vulnerability in Unlimited Theme Addon For Elementor and WooCommerce (WordPress) allows Information Exposure via the uta-template shortcode in all versions up to 1.2.1. Exploitation requires Contributor-level authentication. A fix exists in version 1.2.2 (and later) per Wordfen...

CVE-2024-12472

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphrduplicatepost due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-level access...

PT-2025-1713 · WordPress · Rraddons For Elementor

Name of the Vulnerable Software and Affected Versions: RRAddons for Elementor plugin for WordPress version 1.1.0 and earlier Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from private or draft posts due to insufficient restrictions o...

PT-2025-1861 · WordPress · Post Duplicator

Name of the Vulnerable Software and Affected Versions: Post Duplicator plugin for WordPress version 2.36 and earlier Description: The issue is related to Information Exposure due to insufficient restrictions on which posts can be duplicated, making it possible for authenticated attackers with...

WordPress plugin RRAddons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-1753 · WordPress · The Unlimited Theme Addon For Elementor/Woocommerce

Name of the Vulnerable Software and Affected Versions: The Unlimited Theme Addon For Elementor and WooCommerce plugin for WordPress versions up to, and including, 1.2.1 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from private or...

CVE-2024-54997

creationtimestamp| type| source ---|---|--- 2025-01-10 21:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg4gbrwhm2i 2025-01-10 21:39:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfg5qqgmvm2u 2025-01-10 23:02:06+00:00| seen|...

WordPress Post Duplicator plugin <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure vulnerability

Authenticated Contributor+ Protected Post Disclosure vulnerability discovered by Webbernaut in WordPress Plugin Post Duplicator versions = 2.36...

CVE-2024-50807

creationtimestamp| type| source ---|---|--- 2025-01-10 16:04:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113804905401091069 2025-01-10 16:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfflonwihj22 2025-01-10 18:00:56+00:00| seen|...

CVE-2024-13318

The Essential WP Real Estate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cldeletelistingfunc function in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated attackers to delete arbitrary pages and posts...

CVE-2024-13303

creationtimestamp| type| source ---|---|--- 2025-01-09 21:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlythl7b2e 2025-01-09 21:38:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnazhipy2e 2025-01-09 22:48:01+00:00| seen|...

CVE-2025-21599

creationtimestamp| type| source ---|---|--- 2025-01-09 16:48:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113799417683833601 2025-01-09 17:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd6kb3fkl25 2025-01-09 17:21:06+00:00| seen|...