CVE-2024-13091

creationtimestamp| type| source ---|---|--- 2025-01-22 00:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113869253453487309 2025-01-22 00:55:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgc5ssvbqo2y 2025-01-22 00:55:04+00:00| seen|...

PT-2025-5041 · Unknown · Kiro G. Formatted Post

Name of the Vulnerable Software and Affected Versions: Kiro G. Formatted post versions n/a through 1.01 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This means that an attacker can inject...

CVE-2025-21547

creationtimestamp| type| source ---|---|--- 2025-01-21 21:18:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrq3acyr2s 2025-01-21 21:48:58+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113868546869641362 2025-01-21 22:50:18+00:00| seen|...

CVE-2024-51941

creationtimestamp| type| source ---|---|--- 2025-01-21 21:17:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lgbroafrmn2t 2025-01-21 22:01:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2500 2025-01-21 22:15:54+00:00| seen|...

CVE-2025-23195

creationtimestamp| type| source ---|---|--- 2025-01-21 21:17:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lgbro7rhew24 2025-01-21 22:01:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2502 2025-01-21 22:15:57+00:00| seen|...

CVE-2025-21506

creationtimestamp| type| source ---|---|--- 2025-01-21 21:17:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrmwsytb2s 2025-01-21 21:48:57+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113868546574516226 2025-01-22 19:02:45+00:00| seen|...

CVE-2025-21502

creationtimestamp| type| source ---|---|--- 2025-01-21 21:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrmnjk4y2c 2025-01-23 13:26:26+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lgfybcgf3c2p 2025-01-25 19:05:51+00:00| seen|...

CVE-2025-22150

creationtimestamp| type| source ---|---|--- 2025-01-21 18:00:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2434 2025-01-21 18:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbhijzb7g2w 2025-01-26 09:31:13+00:00| seen|...

CVE-2024-32555

creationtimestamp| type| source ---|---|--- 2025-01-21 14:39:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgb3g745mx2k 2025-01-21 14:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113866893861103376 2025-01-22 14:28:19+00:00| seen|...

CVE-2025-24001

creationtimestamp| type| source ---|---|--- 2025-01-21 14:17:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgb26h463j2f 2025-01-21 14:39:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgb3g77g3u2y 2025-01-21 16:07:47+00:00| seen|...

CVE-2025-23184

creationtimestamp| type| source ---|---|--- 2025-01-20 15:52:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lg6p2mpkbo2u 2025-01-21 09:41:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113865685557448005 2025-01-21 10:01:15+00:00| seen|...

WordPress List category posts plugin < 0.90.3 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin List category posts versions 0.90.3...

CVE-2025-0585

creationtimestamp| type| source ---|---|--- 2025-01-20 02:22:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113858298647796799 2025-01-20 03:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg5eqnqbm52w 2025-01-20 03:53:02+00:00| seen|...

GHSA-M7XQ-9374-9RVX

creationtimestamp| type| source ---|---|--- 2025-01-19 00:38:51+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lg2lj3zqda2i...

CVE-2024-9020 List category posts < 0.90.3 - Author+ Stored XSS

The List category posts WordPress plugin before 0.90.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2025-23209

creationtimestamp| type| source ---|---|--- 2025-01-18 00:57:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2270 2025-01-18 01:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfy54asrpp2f 2025-01-18 01:48:56+00:00| seen|...

PT-2025-3706 · WordPress · List Category Posts

Name of the Vulnerable Software and Affected Versions: List category posts WordPress plugin versions prior to 0.90.3 Description: The issue concerns the List category posts WordPress plugin, where versions prior to 0.90.3 do not validate and escape some of its shortcode attributes before outputti...

WordPress plugin Evergreen Content Poster has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

CVE-2024-9020: Improper Neutralization of Input During Web Page Generation

The List category posts WordPress plugin before 0.90.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2025-0534

creationtimestamp| type| source ---|---|--- 2025-01-17 18:41:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113845158942867513 2025-01-17 18:57:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2189 2025-01-17 19:15:52+00:00| seen|...