PT-2025-1736 · WordPress · Medical Addon For Elementor

Name of the Vulnerable Software and Affected Versions: Medical Addon for Elementor plugin for WordPress versions up to, and including, 1.6.2 Description: The issue allows authenticated attackers with Contributor-level access and above to read the content of draft, pending, and private posts due t...

CVE-2025-0148

creationtimestamp| type| source ---|---|--- 2025-02-03 23:15:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcockj32r2i 2025-02-03 23:30:11+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lhcp4zzahf2e 2025-02-04 02:08:39+00:00| seen|...

WordPress B Slider- Gutenberg Slider Block for WP plugin <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode vulnerability

Authenticated Contributor+ Private Post Disclosure via bsb-slider Shortcode vulnerability discovered by Nishiv in WordPress Plugin B Slider versions = 1.1.23...

CVE-2025-24906

creationtimestamp| type| source ---|---|--- 2025-02-03 21:49:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113942157461874885 2025-02-03 22:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhckywoopj2c 2025-02-03 23:40:52+00:00| seen|...

WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin Blog, Posts and Category Filter for Elementor versions = 2.0.1...

CVE-2024-12511

creationtimestamp| type| source ---|---|--- 2025-02-03 19:29:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113941609009302527 2025-02-03 20:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcec765r52r 2025-02-03 22:00:19+00:00| seen|...

CVE-2024-56161

creationtimestamp| type| source ---|---|--- 2025-02-03 18:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhc5ld77ig2p 2025-02-03 20:19:12+00:00| seen| https://t.me/cvedetector/17082 2025-02-03 21:11:49+00:00| seen|...

WordPress Easy Related Posts plugin <= 2.0.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Easy Related Posts versions = 2.0.2...

CVE-2024-57522

creationtimestamp| type| source ---|---|--- 2025-02-03 13:13:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113940128372651821 2025-02-03 13:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbmsbmtat2i 2025-02-03 14:08:00+00:00| seen|...

CVE-2025-20635

creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaononxcq2r 2025-02-03 07:46:43+00:00| seen| https://t.me/cvedetector/17044 2025-02-03 08:03:42+00:00| seen|...

WordPress Migrate Posts Plugin <=1.0 - Post Based Cross Site Scripting (XSS) vulnerability

Post Based Cross Site Scripting XSS vulnerability discovered by wackydawg in WordPress Plugin Migrate Posts versions = 1.0...

CVE-2024-56898

creationtimestamp| type| source ---|---|--- 2025-02-02 16:00:08+00:00| published-proof-of-concept| Telegram/UyVI-ODfpx-m79cxnYxNG85GR0fDpOs6exyBtw4kZXt7s 2025-02-03 20:53:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113941938396491531 2025-02-03 21:15:40+00:00| seen|...

CVE-2024-12825

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVE-2024-12825

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVE-2024-13651

creationtimestamp| type| source ---|---|--- 2025-02-01 04:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3nph5r7z2p 2025-02-01 05:25:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3710 2025-02-01 07:16:25+00:00| seen|...

CVE-2024-13547

creationtimestamp| type| source ---|---|--- 2025-02-01 04:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3npevnhs27 2025-02-01 05:25:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3711 2025-02-01 07:16:31+00:00| seen|...

WordPress Custom Related Posts plugin <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Private Post Search and Relation Updates vulnerability

Missing Authorization to Authenticated Subscriber+ Private Post Search and Relation Updates vulnerability discovered by Lucio Sá in WordPress Plugin Custom Related Posts versions = 1.7.3...

CVE-2024-12825: Missing Authorization

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above...

PT-2025-1961

Name of the Vulnerable Software and Affected Versions Custom Related Posts plugin for WordPress versions up to, and including, 1.7.3 Description The issue allows unauthorized access and modification of data due to a missing capability check on three AJAX actions. This makes it possible for...

PT-2025-2265 · WordPress · Woocommerce Support Ticket System

Name of the Vulnerable Software and Affected Versions: WooCommerce Support Ticket System plugin for WordPress versions up to, and including, 17.8 Description: The issue is related to missing capability checks on the ajax delete message, ajax get customers partial list, and ajax get admins list...