CVE-2025-24076

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-31 02:31:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9584 2025-04-15 09:00:16+00:00| seen|...

CVE-2025-22454

creationtimestamp| type| source ---|---|--- 2025-03-11 14:39:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7155 2025-03-11 17:37:31+00:00| seen| https://t.me/cvedetector/20087 2025-03-12 13:31:29+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lk6owi4smk2y 2025-03-24...

CVE-2024-54085

creationtimestamp| type| source ---|---|--- 2025-03-11 14:33:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144289034101069 2025-03-11 14:40:25+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk4ccu6lze2v 2025-03-18 12:31:00+00:00| seen|...

CVE-2024-56181

creationtimestamp| type| source ---|---|--- 2025-03-11 11:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114143638836321476 2025-03-11 12:35:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk43e3dmae26 2025-03-13 11:00:00+00:00| seen|...

CVE-2025-0151

creationtimestamp| type| source ---|---|--- 2025-03-11 11:28:45+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lk3xm6jwfh2w 2025-03-11 19:48:50+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114145527668165612 2025-03-11 20:46:21+00:00| seen|...

PT-2025-10934

Name of the Vulnerable Software and Affected Versions: List of Posts from each Category plugin for WordPress versions n/a through 2.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker could potentially trick a user...

WordPress plugin: List of Posts from Each Category – Cross-site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an applicatio...

CVE-2025-28905: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chaser324 Featured Posts Grid featured-posts-grid allows Stored XSS.This issue affects Featured Posts Grid: from n/a through = 1.7...

PT-2025-10941

Name of the Vulnerable Software and Affected Versions: Chaser324 Featured Posts Grid versions 1.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

CVE-2025-28894: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in frucomerci List of Posts from each Category plugin for WordPress list-posts-by-category allows Stored XSS.This issue affects List of Posts from each Category plugin for WordPress: from n/a through = 2.0...

CVE-2025-25306

creationtimestamp| type| source ---|---|--- 2025-03-10 19:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk2cmbftsd2v 2025-03-10 19:48:42+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114139864871772564 2025-03-10 23:13:49+00:00| seen|...

CVE-2025-24813

creationtimestamp| type| source ---|---|--- 2025-03-10 17:14:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lk22hs7zke24 2025-03-10 17:38:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7027 2025-03-10 17:45:38+00:00| seen|...

CVE-2024-13918

creationtimestamp| type| source ---|---|--- 2025-03-10 10:39:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6989 2025-03-10 11:40:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzhrxmaoz2h 2025-03-10 11:48:30+00:00| seen|...

CVE-2024-12610

The School Management System for Wordpress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'mjsmgtremovefeetype' and 'mjsmgtremovecategorynew' AJAX actions in all versions up to, and including, 93.0.0. This makes it possible for...

CVE-2025-1322

The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 16.26.10 via the 'feed' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated...

CVE-2025-1322

The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 16.26.10 via the 'feed' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated...

CVE-2025-1322

CVE-2025-1322 affects the WordPress plugin “WP-Recall – Registration, Profile, Commerce & More” up to version 16.26.10. The vulnerability is an information exposure through the feed shortcode caused by insufficient restrictions on which posts can be included, allowing (per NVD/Wordfence) data fro...

CVE-2024-13816

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 2.3.6. This mak...

CVE-2024-13890: Improper Control of Generation of Code

The Allow PHP Execute plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0. This is due to allowing PHP code to be entered by all users for whom unfiltered HTML is allowed. This makes it possible for authenticated attackers, with Editor-level access a...

CVE-2025-1322: Exposure of Sensitive Information to an Unauthorized Actor

The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 16.26.10 via the 'feed' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated...