PT-2025-34968

Name of the Vulnerable Software and Affected Versions: Ajax Search Lite versions prior to 4.13.2 Description: The Ajax Search Lite plugin for WordPress is susceptible to Basic Information Exposure. A missing authorization check in the AJAX search handler allows unauthenticated attackers to...

Linux Distros Unpatched Vulnerability : CVE-2020-11028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In affected versions of WordPress, some private posts, which were previously public, can result in unauthenticated disclosure under a specific set of conditions...

Linux Distros Unpatched Vulnerability : CVE-2019-20043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users who do not have the rights to publish a...

Linux Distros Unpatched Vulnerability : CVE-2022-4973

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress...

Linux Distros Unpatched Vulnerability : CVE-2020-25286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or...

Linux Distros Unpatched Vulnerability : CVE-2023-5561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of use...

CVE-2025-7775

creationtimestamp| type| source ---|---|--- 2025-08-26 11:58:03+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0268 2025-08-26 12:04:41+00:00| seen| https://www.cert.at/de/warnungen/2025/8/citrix-netscaler-adc-schwachstellen-cve-2025-7775 2025-08-26 12:28:36+00:00| seen|...

CVE-2025-9471

creationtimestamp| type| source ---|---|--- 2025-08-26 04:33:09+00:00| seen| https://bsky.app/profile/potato.software/post/3lxbopoybxi2x 2025-08-26 05:28:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbrtcrejo2v...

CVE-2025-57805

The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2...

CVE-2025-57805 The Scratch Channel's Publish Articles POST Request Can Upload Articles Without Validation

The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2...

CVE-2025-54370

creationtimestamp| type| source ---|---|--- 2025-08-25 17:27:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxajjirf2e2d 2025-08-26 05:09:19+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3lxbqqe4tvs2h 2025-08-29 16:47:32+00:00| seen|...

CVE-2025-54480

creationtimestamp| type| source ---|---|--- 2025-08-25 14:15:14+00:00| seen| https://bsky.app/profile/potato.software/post/3lxa6rlulrr2z 2025-08-25 17:22:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxajakblc42z 2025-08-26 06:00:33+00:00| seen|...

CVE-2025-7426

creationtimestamp| type| source ---|---|--- 2025-08-25 10:09:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx7qznwgqw27 2025-08-25 10:31:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lx7sbqivtx2u 2025-08-25 13:36:17+00:00| seen|...

CVE-2025-54300

creationtimestamp| type| source ---|---|--- 2025-08-25 09:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx7nfehxec2w 2025-08-25 09:10:09+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lx7npxtd3c2h...

CVE-2025-54301

creationtimestamp| type| source ---|---|--- 2025-08-25 07:28:14+00:00| seen| https://bsky.app/profile/jensen.technology/post/3lx7hzswdmo2g 2025-08-25 08:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx7mbkte7t2t...

CVE-2025-9405

creationtimestamp| type| source ---|---|--- 2025-08-25 04:46:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx76zizusi2w 2025-08-25 08:16:25+00:00| seen| https://bsky.app/profile/potato.software/post/3lx7kpyuid42q...

CVE-2025-9393

creationtimestamp| type| source ---|---|--- 2025-08-24 18:34:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx64saesj32p 2025-08-25 00:01:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lx6p354eyj22...

CVE-2025-9392

creationtimestamp| type| source ---|---|--- 2025-08-24 16:29:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx5vsixpze2d 2025-08-25 01:31:50+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lx6u4ji6au23...

CVE-2025-9379

creationtimestamp| type| source ---|---|--- 2025-08-24 08:38:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx53jekowo2o 2025-08-24 09:01:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lx54rsb4fh2p...

CVE-2025-9380

creationtimestamp| type| source ---|---|--- 2025-08-24 07:31:51+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lx4xrdztas2w 2025-08-24 08:43:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx53scy2at27...