CVE-2024-13841

The Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.0 via the 'bse-elementor-template' shortcode due to insufficient restrictions on which posts can be included. This...

CVE-2024-13440

creationtimestamp| type| source ---|---|--- 2025-02-09 04:25:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113972028460516363 2025-02-09 05:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhpurv6ykz22 2025-02-09 07:38:09+00:00| seen|...

CVE-2024-13850 Simple add pages or posts <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

The Simple add pages or posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject...

CVE-2024-13850: Improper Neutralization of Input During Web Page Generation

The Simple add pages or posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject...

CVE-2024-55272

creationtimestamp| type| source ---|---|--- 2025-02-07 22:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmt5gizh2x 2025-02-07 23:39:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhmrjasto52n 2025-02-08 00:41:47+00:00| seen|...

CVE-2024-13514

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.5 via the 'bsb-slider' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, wi...

CVE-2025-25147

creationtimestamp| type| source ---|---|--- 2025-02-07 10:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepojmem2a 2025-02-07 12:08:45+00:00| seen| https://t.me/cvedetector/17483 2025-02-07 12:53:52+00:00| seen|...

CVE-2025-25123

Cross-Site Request Forgery CSRF vulnerability in xdark Easy Related Posts easy-related-posts allows Stored XSS.This issue affects Easy Related Posts: from n/a through = 2.0.2...

CVE-2025-25123 WordPress Easy Related Posts plugin <= 2.0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in xdark Easy Related Posts allows Stored XSS. This issue affects Easy Related Posts: from n/a through 2.0.2...

CVE-2025-25123

CVE-2025-25123 maps to a WordPress plugin issue: Easy Related Posts, affected versions are

CVE-2025-1077

creationtimestamp| type| source ---|---|--- 2025-02-07 08:40:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113961706521591061 2025-02-07 09:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlbazlet424 2025-02-07 10:02:39+00:00| seen|...

CVE-2024-13841 Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time <= 1.0.0 - Authenticated (Contributor+) Post Disclosure

The Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.0 via the 'bse-elementor-template' shortcode due to insufficient restrictions on which posts can be included. This...

CVE-2024-13841

CVE-2024-13841 affects the WordPress plugin Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time. It allows information exposure via the bse-elementor-template shortcode in all versions up to 1.0.0, enabling authenticated attackers with Contributor-level access and above to...

CVE-2025-1072

creationtimestamp| type| source ---|---|--- 2025-02-07 04:10:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113960644266809055 2025-02-07 04:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkqicnisu2s 2025-02-07 07:57:37+00:00| seen|...

CVE-2025-1061

creationtimestamp| type| source ---|---|--- 2025-02-07 01:59:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113960128382345559 2025-02-07 02:17:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkjuqd36w25 2025-02-07 02:49:22+00:00| seen|...

PT-2025-5942

Name of the Vulnerable Software and Affected Versions xdark Easy Related Posts versions n/a through 2.0.2 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web applicatio...

PT-2025-5904

Name of the Vulnerable Software and Affected Versions The Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time plugin for WordPress versions up to, and including, 1.0.0 Description The issue allows authenticated attackers with Contributor-level access and above to extract...

CVE-2024-13841: Authorization Bypass Through User-Controlled Key

The Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.0 via the 'bse-elementor-template' shortcode due to insufficient restrictions on which posts can be included. This...

CVE-2025-25123: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in xdark Easy Related Posts easy-related-posts allows Stored XSS.This issue affects Easy Related Posts: from n/a through = 2.0.2...

CVE-2025-1084

creationtimestamp| type| source ---|---|--- 2025-02-06 23:35:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113959561999278807 2025-02-07 00:20:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkdehcres2u 2025-02-07 02:06:34+00:00| seen|...