CVE-2024-13546

The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.1 via the 'getimagedescription' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data...

WordPress WP Posts Carousel plugin <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto_play_timeout Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via autoplaytimeout Parameter vulnerability discovered by Krzysztof Zając in WordPress Plugin WP Posts Carousel versions = 1.3.7...

CVE-2025-1259

creationtimestamp| type| source ---|---|--- 2025-03-03 08:54:36+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3ljhlb4ilik2c 2025-03-04 20:31:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6418 2025-03-04 22:32:14+00:00| seen| https://t.me/cvedetector/19535 2025-03-04...

CVE-2025-1260

creationtimestamp| type| source ---|---|--- 2025-03-03 08:54:36+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3ljhlb4ilik2c 2025-03-04 20:32:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6424 2025-03-04 21:48:47+00:00| seen|...

WordPress plugin NotFound Attach Gallery Posts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress...

CVE-2025-1491

The WP Posts Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplaytimeout’ parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-1491 WP Posts Carousel <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto_play_timeout Parameter

The WP Posts Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplaytimeout’ parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-1671

creationtimestamp| type| source ---|---|--- 2025-03-01 08:27:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6063 2025-03-01 09:00:53+00:00| seen| Telegram/nu5zP1RQJMxhaQWBhFSOb3vErKKnFyrM4knJnup4yvdMGEw 2025-03-01 09:48:06+00:00| seen|...

WordPress plugin WP Posts Carousel 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

CVE-2025-0159

creationtimestamp| type| source ---|---|--- 2025-02-28 19:20:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114083131418296123 2025-02-28 19:26:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5955 2025-02-28 20:08:31+00:00| seen|...

CVE-2024-13832

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'utelementor' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...

CVE-2024-13832

CVE-2024-13832 – Ultra Addons Lite for Elementor (WordPress) is confirmed in connected documents as an information disclosure vulnerability. It affects Ultra Addons Lite for Elementor

PT-2025-9071 · WordPress · Ultra Addons Lite For Elementor

Name of the Vulnerable Software and Affected Versions: Ultra Addons Lite for Elementor plugin for WordPress versions up to, and including, 1.1.8 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from password-protected, private, or draft...

CVE-2024-36047

creationtimestamp| type| source ---|---|--- 2025-02-27 23:25:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5820 2025-02-28 00:02:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114078577366616418 2025-02-28 01:08:07+00:00| seen| https://t.me/cvedetector/19093 2025-02-28...

CVE-2024-37566

creationtimestamp| type| source ---|---|--- 2025-02-27 23:25:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5819 2025-02-28 00:02:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114078577366616418 2025-02-28 01:08:08+00:00| seen| https://t.me/cvedetector/19095 2025-02-28...

CVE-2025-0475

creationtimestamp| type| source ---|---|--- 2025-02-27 06:26:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lj5b53egjb27 2025-02-27 19:09:35+00:00| seen| https://bsky.app/profile/andranglin.bsky.social/post/3lj6lr3ihks2m 2025-03-02 13:24:32+00:00| seen|...

CVE-2024-57040

creationtimestamp| type| source ---|---|--- 2025-02-26 22:24:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5631 2025-02-26 22:41:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114072595097576184 2025-02-26 23:33:19+00:00| seen|...

CVE-2024-50688

creationtimestamp| type| source ---|---|--- 2025-02-26 21:53:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114072408550773487 2025-02-26 23:33:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jzsc4zb22 2025-02-27 00:19:29+00:00| seen| https://t.me/cvedetector/189...

CVE-2025-27349

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nurelm Get Posts nurelm-get-posts allows Stored XSS.This issue affects Get Posts: from n/a through = 0.6...

CVE-2025-27298

Cross-Site Request Forgery CSRF vulnerability in cmstactics WP Video Posts wp-video-posts allows OS Command Injection.This issue affects WP Video Posts: from n/a through = 3.5.1...