6904 matches found
CVE-2025-8091 EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure
The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4.6 via the addsingleeventon and addeventon shortcodes due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to...
PT-2025-33465 · WordPress · Eventon Lite
Name of the Vulnerable Software and Affected Versions: EventON Lite versions prior to 2.4.7 Description: The EventON Lite plugin for WordPress is vulnerable to Information Exposure in versions prior to 2.4.7 via the add single eventon and add eventon shortcodes. Insufficient restrictions on post...
MAL-2025-13242 Malicious code in @zalastax/nolb-posts (npm)
The package @zalastax/nolb-posts was found to contain malicious code...
Malicious code in @zalastax/nolb-posts (npm)
The package @zalastax/nolb-posts was found to contain malicious code...
MAL-2025-8758 Malicious code in @malware-test-leams-posts-sudor-birle/test-mlw3-leams-posts-sudor-birle (npm)
The package @malware-test-leams-posts-sudor-birle/test-mlw3-leams-posts-sudor-birle was found to contain malicious code...
CVE-2025-9039
creationtimestamp| type| source ---|---|--- 2025-08-14 17:58:52+00:00| seen| https://bsky.app/profile/infosecindustry.bsky.social/post/3lwew5ds6ux2p 2025-08-14 18:27:41+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lwexquc3no25 2025-08-14 19:45:33+00:00| seen|...
CVE-2025-8714
creationtimestamp| type| source ---|---|--- 2025-08-14 13:25:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115027339401596750 2025-08-14 22:36:29+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lwffnooc5k2w 2025-08-15 06:42:27+00:00| seen|...
CVE-2025-54706
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Magical Posts Display magical-posts-display allows DOM-Based XSS.This issue affects Magical Posts Display: from n/a through = 1.2.52...
CVE-2025-52728
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows PHP Local File Inclusion.This issue affects Responsive Posts Carousel Pro: from n/a through = 15...
CVE-2025-55674
creationtimestamp| type| source ---|---|--- 2025-08-14 11:09:23+00:00| seen| https://seclists.org/oss-sec/2025/q3/107 2025-08-14 13:30:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lweh5v4hus2o 2025-08-14 15:02:16+00:00| seen|...
CVE-2025-54706 WordPress Magical Posts Display Plugin plugin <= 1.2.52 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Magical Posts Display magical-posts-display allows DOM-Based XSS.This issue affects Magical Posts Display: from n/a through = 1.2.52...
CVE-2025-54706 WordPress Magical Posts Display Plugin plugin <= 1.2.52 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Magical Posts Display allows DOM-Based XSS. This issue affects Magical Posts Display: from n/a through 1.2.52...
CVE-2025-54706
CVE-2025-54706 concerns the WordPress plugin Magical Posts Display (versions up to and including 1.2.52). The issue is a DOM-based cross-site scripting (XSS) vulnerability caused by improper neutralization of user input during web page generation. Impact, per the sources, is low to medium across ...
CVE-2025-52728 WordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebCodingPlace Responsive Posts Carousel WordPress Plugin allows PHP Local File Inclusion. This issue affects Responsive Posts Carousel WordPress Plugin: from n/a through 15.0...
CVE-2025-52728
CVE-2025-52728 is a PHP Local File Inclusion vulnerability in the WordPress plugin “Responsive Posts Carousel Pro” (affected: versions up to 15.0), caused by improper control of filenames used in include/require statements. The issue enables inclusion of local files via crafted input. Connected s...
CVE-2025-52728 WordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows PHP Local File Inclusion.This issue affects Responsive Posts Carousel Pro: from n/a through = 15...
CVE-2025-4390
The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the 'validaterestrictions' function. This makes it possible for unauthenticated attackers to extract sensitive data including the content of resticted...
CVE-2025-5187
creationtimestamp| type| source ---|---|--- 2025-08-14 01:07:14+00:00| seen| https://bsky.app/profile/kubernetes.dev/post/3lwd5m3yc6j2i 2025-08-14 03:26:50+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lwdfg26erm2s 2025-08-14 16:22:07+00:00| seen|...
PT-2025-33209 · WordPress · Webcodingplace Responsive Posts Carousel
Name of the Vulnerable Software and Affected Versions: WebCodingPlace Responsive Posts Carousel WordPress Plugin versions through 15.0 Description: The vulnerability involves improper control of filename handling for include/require statements in a PHP program, specifically a PHP Local File...
WordPress plugin Responsive Posts Carousel WordPress Plugin Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...