PT-2025-46253

Name of the Vulnerable Software and Affected Versions The Magazine Companion plugin for WordPress versions through 1.2.3 Description The Magazine Companion plugin for WordPress is susceptible to Stored Cross-Site Scripting through the headerHtmlTag attribute within the bnm-blocks/featured-posts-1...

WordPress My Geo Posts Free plugin <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin My Geo Posts Free versions = 1.2...

CVE-2025-63147

creationtimestamp| type| source ---|---|--- 2025-11-10 18:32:22+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5caxicuohp2 2025-11-10 19:54:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5cfmcllcm2s...

CVE-2025-63456

creationtimestamp| type| source ---|---|--- 2025-11-10 18:31:35+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cawxximmp2 2025-11-10 19:35:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5celhwpu32u...

CVE-2025-63455

creationtimestamp| type| source ---|---|--- 2025-11-10 18:31:34+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cawr7zbdp2 2025-11-10 19:48:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5cfc2bwrb2x...

CVE-2025-64456

creationtimestamp| type| source ---|---|--- 2025-11-10 15:56:26+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5byc7p5hep2 2025-11-10 16:21:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5bzqvgyzt2x 2025-11-10 17:10:54+00:00| seen|...

CVE-2025-64683

creationtimestamp| type| source ---|---|--- 2025-11-10 15:55:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5bybopvgc2s 2025-11-10 15:58:34+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5bydiou3rc2...

CVE-2025-41731

creationtimestamp| type| source ---|---|--- 2025-11-10 09:01:50+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m5bb62m7a724 2025-11-10 09:38:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5bd7o2lze2n 2025-11-10 09:45:59+00:00| seen|...

CVE-2025-12865

creationtimestamp| type| source ---|---|--- 2025-11-10 03:01:51+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m5an2ehh7324 2025-11-10 03:51:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5apsrr3s42b 2025-11-10 06:25:17+00:00| seen|...

CVE-2025-12177

The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the deleteExpired and clearTempDataCPCron functions in all versions up to, and including, 3.3.30. This makes it possible for unauthenticated attackers to trigger these cron jobs...

SUSE CVE-2016-11067

An issue was discovered in Mattermost Server before 3.2.0. It allowed crafted posts that could cause a web browser to hang...

CVE-2025-12915

creationtimestamp| type| source ---|---|--- 2025-11-09 00:32:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m55ub5ba3k2w 2025-11-09 00:55:18+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m55vizwzit22 2025-11-09 01:32:02+00:00| seen|...

WordPress Auto Prune Posts plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Auto Prune Posts versions = 3.0.0...

CVE-2025-12098

creationtimestamp| type| source ---|---|--- 2025-11-08 10:22:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m54er2ull22n 2025-11-08 11:45:17+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m54je5qqr6j2...

CVE-2025-12399

creationtimestamp| type| source ---|---|--- 2025-11-08 09:57:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m54decrjo62x 2025-11-08 10:31:57+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m54fbdz55z2d 2025-11-08 11:45:53+00:00| seen|...

EUVD-2025-38361

The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the deleteExpired and clearTempDataCPCron functions in all versions up to, and including, 3.3.30. This makes it possible for unauthenticated attackers to trigger these cron jobs...

CVE-2025-12064

creationtimestamp| type| source ---|---|--- 2025-11-08 05:45:25+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m53vaozrn3k2 2025-11-08 05:47:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m53veejglz2k...

CVE-2025-12177

The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the deleteExpired and clearTempDataCPCron functions in all versions up to, and including, 3.3.30. This makes it possible for unauthenticated attackers to trigger these cron jobs...

CVE-2025-12177

CVE-2025-12177 affects the WordPress Download Manager plugin (versions ≤ 3.3.30). The root cause is a hardcoded Cron key that enables unauthenticated triggering of deleteExpired() and clearTempDataCPCron(). This can lead to deletion of expired posts and clearing of cache. The vulnerability is con...

CVE-2025-12177 Download Manager <= 3.3.30 - Unauthenticated Cron Trigger due to Hardcoded Cron Key

The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the deleteExpired and clearTempDataCPCron functions in all versions up to, and including, 3.3.30. This makes it possible for unauthenticated attackers to trigger these cron jobs...