CVE-2025-62900: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Popular Posts by Webline popular-posts-by-webline allows Stored XSS.This issue affects Popular Posts by Webline: from n/a through = 1.1.1...

PT-2025-43783

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Tadlock Query Posts query-posts allows Stored XSS.This issue affects Query Posts: from n/a through = 0.3.2...

CVE-2025-62954: Missing Authorization

Missing Authorization vulnerability in rsocial Revive Old Posts tweet-old-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive Old Posts: from n/a through = 9.3.3...

CVE-2025-6440

creationtimestamp| type| source ---|---|--- 2025-10-24 09:15:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3wjzpxwk22m 2025-10-24 10:05:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3wmsnw66f2a 2025-10-30 08:46:17+00:00| seen|...

CVE-2025-11253

creationtimestamp| type| source ---|---|--- 2025-10-24 09:03:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3wjdpfwff2b 2025-10-24 10:16:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3wnfztb452f...

CVE-2025-53701

creationtimestamp| type| source ---|---|--- 2025-10-23 14:03:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115423850260835004 2025-10-23 15:40:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3up32zjoy2o...

CVE-2025-62605

Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon version 4.4, support for verifiable quote posts with quote controls was added, but it is possible for an attacker to bypass these controls in Mastodon versions prior to 4.4.8 and 4.5.0-beta.2. Mastodon...

CVE-2025-40780

creationtimestamp| type| source ---|---|--- 2025-10-22 13:56:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/68 2025-10-22 15:58:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418643498336537 2025-10-22 16:26:32+00:00| seen|...

CVE-2025-12036

creationtimestamp| type| source ---|---|--- 2025-10-22 08:08:52+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3m3rfdujt5k2z 2025-10-22 08:08:52+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3m3rfdt6cl22z 2025-10-22 08:55:48+00:00| seen|...

CVE-2025-53072

creationtimestamp| type| source ---|---|--- 2025-10-22 04:33:55+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3qzdj5an22i 2025-10-22 07:21:45+00:00| seen| https://poliverso.org/objects/0477a01e-736b48f2-6409a361f7d72e52 2025-10-22 07:25:50+00:00| seen|...

WordPress Posts By Tag plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Posts By Tag versions = 3.2.1...

CVE-2025-11949

creationtimestamp| type| source ---|---|--- 2025-10-21 08:13:43+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3m3ov5kg5as2q 2025-10-21 08:14:16+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3m3ov6jmz4k2q 2025-10-21 09:14:52+00:00| seen|...

CVE-2025-12001

creationtimestamp| type| source ---|---|--- 2025-10-21 00:08:58+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3o22swfw52i 2025-10-21 01:40:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3o76l7ysm2o...

WordPress Dynamically Display Posts plugin SQL Injection Vulnerability

WordPress Dynamically Display Posts plugin is a WordPress plugin for creating a store locator page in your website that displays information about nearby stores via Google Maps. WordPress Dynamically Display Posts plugin suffers from a SQL injection vulnerability that stems from a lack of...

CVE-2025-41028

creationtimestamp| type| source ---|---|--- 2025-10-20 10:34:57+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3mmlaqhmv2s 2025-10-20 11:35:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3mpxlghz52h...

CVE-2025-62577

creationtimestamp| type| source ---|---|--- 2025-10-20 06:05:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3m5jqtxig2i 2025-10-20 07:35:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3mck3l72d2o 2025-10-20 08:15:28+00:00| seen|...

CVE-2022-36903

creationtimestamp| type| source ---|---|--- 2025-10-19 15:39:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m3kb2yynzmw2 2025-10-19 16:20:18+00:00| seen| https://bsky.app/profile/potato.software/post/3m3kpfudtee2s...

CVE-2025-11926

The Related Posts Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissio...

EUVD-2025-34990

The Related Posts Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissio...

CVE-2025-11926

The Related Posts Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissio...