CVE-2025-25170

CVE-2025-25170 affects the WordPress Migrate Posts plugin (versions

CVE-2025-23441

The CVE-2025-23441 entry concerns the WordPress NotFound Attach Gallery Posts plugin (versions

CVE-2025-23441 WordPress Attach Gallery Posts plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dkukral Attach Gallery Posts attach-gallery-posts allows Reflected XSS.This issue affects Attach Gallery Posts: from n/a through = 1.6...

CVE-2024-13546

The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.1 via the 'getimagedescription' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data...

WordPress WP Posts Carousel plugin <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto_play_timeout Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via autoplaytimeout Parameter vulnerability discovered by Krzysztof Zając in WordPress Plugin WP Posts Carousel versions = 1.3.7...

CVE-2025-1260

creationtimestamp| type| source ---|---|--- 2025-03-03 08:54:36+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3ljhlb4ilik2c 2025-03-04 20:32:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6424 2025-03-04 21:48:47+00:00| seen|...

CVE-2025-1259

creationtimestamp| type| source ---|---|--- 2025-03-03 08:54:36+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3ljhlb4ilik2c 2025-03-04 20:31:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6418 2025-03-04 22:32:14+00:00| seen| https://t.me/cvedetector/19535 2025-03-04...

PT-2025-9462

Name of the Vulnerable Software and Affected Versions Migrate Posts versions from n/a through 1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions from n/a...

WordPress plugin “NotFound” with the “Attach Gallery Posts” feature – Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress...

PT-2025-9332

Name of the Vulnerable Software and Affected Versions Attach Gallery Posts versions n/a through 1.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For Attach Gallery...

CVE-2025-23441: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dkukral Attach Gallery Posts attach-gallery-posts allows Reflected XSS.This issue affects Attach Gallery Posts: from n/a through = 1.6...

CVE-2025-25170: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DotsquaresLtd Migrate Posts migrate-post allows Reflected XSS.This issue affects Migrate Posts: from n/a through = 1.0...

CVE-2025-1491

The WP Posts Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplaytimeout’ parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-1491 WP Posts Carousel <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto_play_timeout Parameter

The WP Posts Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplaytimeout’ parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-1671

creationtimestamp| type| source ---|---|--- 2025-03-01 08:27:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6063 2025-03-01 09:00:53+00:00| seen| Telegram/nu5zP1RQJMxhaQWBhFSOb3vErKKnFyrM4knJnup4yvdMGEw 2025-03-01 09:48:06+00:00| seen|...

WordPress Plugin WP Posts Carousel Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

PT-2025-9148

Name of the Vulnerable Software and Affected Versions Booking Calendar and Notification plugin for WordPress versions prior to 4.0.4 Description The issue allows unauthorized access, modification, and loss of data due to missing capability checks on the wpcb all bookings, wpcb update booking post...

PT-2025-9176

Name of the Vulnerable Software and Affected Versions WP Posts Carousel plugin for WordPress versions up to and including 1.3.7 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with...

CVE-2025-1491: Improper Neutralization of Input During Web Page Generation

The WP Posts Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplaytimeout’ parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-0159

creationtimestamp| type| source ---|---|--- 2025-02-28 19:20:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114083131418296123 2025-02-28 19:26:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5955 2025-02-28 20:08:31+00:00| seen|...