CVE-2025-23476

Cross-Site Request Forgery CSRF vulnerability in isnowfy my-related-posts my-related-posts allows Stored XSS.This issue affects my-related-posts: from n/a through = 1.1...

CVE-2025-24803

creationtimestamp| type| source ---|---|--- 2025-02-05 18:44:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113952756172745897 2025-02-05 19:18:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhbz6hwmx2w 2025-02-05 21:39:47+00:00| seen|...

CVE-2024-56132

creationtimestamp| type| source ---|---|--- 2025-02-05 18:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6jkqn6j2f 2025-02-05 18:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113952771043573312 2025-02-05 22:08:50+00:00| seen|...

CVE-2025-20204

creationtimestamp| type| source ---|---|--- 2025-02-05 16:36:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113952253513111136 2025-02-05 16:37:05+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113952255128702135 2025-02-05 17:16:28+00:00| seen|...

CVE-2024-43217

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pierre Lebedel Kodex Posts likes allows Reflected XSS.This issue affects Kodex Posts likes: from n/a through 2.5.0...

CVE-2024-52433

Deserialization of Untrusted Data vulnerability in Mindstien Technologies My Geo Posts Free my-geo-posts-free allows Object Injection.This issue affects My Geo Posts Free: from n/a through = 1.2...

CVE-2024-52409

Deserialization of Untrusted Data vulnerability in Phoenixheart AJAX Random Posts ajax-random-posts allows Object Injection.This issue affects AJAX Random Posts: from n/a through = 0.3.3...

CVE-2025-0665

creationtimestamp| type| source ---|---|--- 2025-02-05 07:24:03+00:00| seen| https://daniel.haxx.se/blog/2025/02/05/curl-8-12-0/ 2025-02-05 08:44:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lhg6lcrwri23 2025-02-05 09:19:06+00:00| seen|...

CVE-2024-32549

Cross-Site Request Forgery CSRF vulnerability in Microkid Related Posts for WordPress allows Cross-Site Scripting XSS.This issue affects Related Posts for WordPress: from n/a through 4.0.3...

CVE-2024-49629

Cross-Site Request Forgery CSRF vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through = 2.2.7...

CVE-2025-1026

creationtimestamp| type| source ---|---|--- 2025-02-05 05:08:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113949546327052981 2025-02-05 05:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfsvrhm2v2h 2025-02-05 06:48:35+00:00| seen|...

CVE-2024-54387

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jaytesh Barange Posts Date Ranges posts-date-ranges allows Reflected XSS.This issue affects Posts Date Ranges: from n/a through = 2.2...

CVE-2024-54413

Cross-Site Request Forgery CSRF vulnerability in brandt-net Display Future Posts display-future-posts allows Stored XSS.This issue affects Display Future Posts: from n/a through = 0.2.3...

CVE-2024-54427

Cross-Site Request Forgery CSRF vulnerability in ljmacphee Category of Posts list-one-category-of-posts allows Stored XSS.This issue affects Category of Posts: from n/a through = 1.0...

CVE-2024-54403

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in oktoberfive Visual Recent Posts visual-recent-posts allows Reflected XSS.This issue affects Visual Recent Posts: from n/a through = 1.2.3...

CVE-2024-51647

Cross-Site Request Forgery CSRF vulnerability in Chaser324 Featured Posts Scroll allows Stored XSS.This issue affects Featured Posts Scroll: from n/a through 1.25...

CVE-2024-36972

creationtimestamp| type| source ---|---|--- 2025-02-05 03:11:24+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lhflxf7g5222 2025-02-05 05:10:46+00:00| seen| https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lhfsmwsioc2w 2025-02-05 07:54:31+00:00| published-proof-of-concept...

CVE-2025-23114

creationtimestamp| type| source ---|---|--- 2025-02-05 02:01:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113948811901159163 2025-02-05 02:03:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113948819496896713 2025-02-05 02:15:51+00:00| seen|...

CVE-2024-11733

The The WordPress Popular Posts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.1.0. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possib...

CVE-2024-48029

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Hung Trang Si SB Random Posts Widget sb-random-posts-widget allows PHP Local File Inclusion.This issue affects SB Random Posts Widget: from n/a through = 1.0...