CVE-2024-13832

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'utelementor' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...

CVE-2024-13832

CVE-2024-13832 – Ultra Addons Lite for Elementor (WordPress) is confirmed in connected documents as an information disclosure vulnerability. It affects Ultra Addons Lite for Elementor

PT-2025-9071 · WordPress · Ultra Addons Lite For Elementor

Name of the Vulnerable Software and Affected Versions: Ultra Addons Lite for Elementor plugin for WordPress versions up to, and including, 1.1.8 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from password-protected, private, or draft...

CVE-2024-36047

creationtimestamp| type| source ---|---|--- 2025-02-27 23:25:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5820 2025-02-28 00:02:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114078577366616418 2025-02-28 01:08:07+00:00| seen| https://t.me/cvedetector/19093 2025-02-28...

CVE-2024-37566

creationtimestamp| type| source ---|---|--- 2025-02-27 23:25:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5819 2025-02-28 00:02:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114078577366616418 2025-02-28 01:08:08+00:00| seen| https://t.me/cvedetector/19095 2025-02-28...

CVE-2025-0475

creationtimestamp| type| source ---|---|--- 2025-02-27 06:26:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lj5b53egjb27 2025-02-27 19:09:35+00:00| seen| https://bsky.app/profile/andranglin.bsky.social/post/3lj6lr3ihks2m 2025-03-02 13:24:32+00:00| seen|...

CVE-2024-57040

creationtimestamp| type| source ---|---|--- 2025-02-26 22:24:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5631 2025-02-26 22:41:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114072595097576184 2025-02-26 23:33:19+00:00| seen|...

CVE-2024-50688

creationtimestamp| type| source ---|---|--- 2025-02-26 21:53:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114072408550773487 2025-02-26 23:33:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jzsc4zb22 2025-02-27 00:19:29+00:00| seen| https://t.me/cvedetector/189...

CVE-2025-27349

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nurelm Get Posts nurelm-get-posts allows Stored XSS.This issue affects Get Posts: from n/a through = 0.6...

CVE-2025-27298

Cross-Site Request Forgery CSRF vulnerability in cmstactics WP Video Posts wp-video-posts allows OS Command Injection.This issue affects WP Video Posts: from n/a through = 3.5.1...

RHSA-2025:0211

creationtimestamp| type| source ---|---|--- 2025-02-26 12:31:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5486 2025-04-17 00:59:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12175...

CVE-2024-48248

creationtimestamp| type| source ---|---|--- 2025-02-26 11:22:04+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lj3b642uxs2u 2025-02-26 11:54:32+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3lj3cycn4qw2j 2025-02-26 12:10:37+00:00| confirmed|...

CVE-2025-25519

creationtimestamp| type| source ---|---|--- 2025-02-26 01:44:44+00:00| seen| https://t.me/cvedetector/18930 2025-02-26 19:49:09+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114071918424654623 2025-02-27 00:00:09+00:00| seen|...

CVE-2025-25515

creationtimestamp| type| source ---|---|--- 2025-02-26 01:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj276a7eun2y 2025-02-26 01:44:50+00:00| seen| https://t.me/cvedetector/18934 2025-02-26 19:49:00+00:00| seen|...

CVE-2025-25516

creationtimestamp| type| source ---|---|--- 2025-02-26 01:13:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj27672eat2w 2025-02-26 01:44:42+00:00| seen| https://t.me/cvedetector/18928 2025-02-26 19:49:00+00:00| seen|...

CVE-2025-25460

A stored Cross-Site Scripting XSS vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" feature. This vulnerability allows authenticated attackers to inject malicious JavaScript payloads into blog posts, which are executed when other users view the posts. The issue arises due to...

CVE-2024-13560: Cross-Site Request Forgery (CSRF)

The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to delete arbitrary pos...

CVE-2024-30150

creationtimestamp| type| source ---|---|--- 2025-02-25 23:16:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114067071175886035 2025-02-26 01:44:42+00:00| seen| https://t.me/cvedetector/18927 2025-02-26 03:17:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj2g46irxz...

CVE-2024-0148

creationtimestamp| type| source ---|---|--- 2025-02-25 20:22:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5366 2025-02-25 23:14:20+00:00| seen| https://t.me/cvedetector/18920 2025-02-27 06:26:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lj5b52ojj32q 2025-02-27...

CVE-2025-26900

creationtimestamp| type| source ---|---|--- 2025-02-25 17:43:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lizfyjlzjp2p 2025-02-25 17:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114065783852093856 2025-02-25 19:23:40+00:00| published-proof-of-concept...