CVE-2025-23184

creationtimestamp| type| source ---|---|--- 2025-01-20 15:52:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lg6p2mpkbo2u 2025-01-21 09:41:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113865685557448005 2025-01-21 10:01:15+00:00| seen|...

WordPress List category posts plugin < 0.90.3 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin List category posts versions 0.90.3...

CVE-2025-0585

creationtimestamp| type| source ---|---|--- 2025-01-20 02:22:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113858298647796799 2025-01-20 03:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg5eqnqbm52w 2025-01-20 03:53:02+00:00| seen|...

GHSA-M7XQ-9374-9RVX

creationtimestamp| type| source ---|---|--- 2025-01-19 00:38:51+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lg2lj3zqda2i...

CVE-2024-9020 List category posts < 0.90.3 - Author+ Stored XSS

The List category posts WordPress plugin before 0.90.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2025-23209

creationtimestamp| type| source ---|---|--- 2025-01-18 00:57:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2270 2025-01-18 01:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfy54asrpp2f 2025-01-18 01:48:56+00:00| seen|...

PT-2025-3706 · WordPress · List Category Posts

Name of the Vulnerable Software and Affected Versions: List category posts WordPress plugin versions prior to 0.90.3 Description: The issue concerns the List category posts WordPress plugin, where versions prior to 0.90.3 do not validate and escape some of its shortcode attributes before outputti...

WordPress plugin Evergreen Content Poster 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

CVE-2025-0534

creationtimestamp| type| source ---|---|--- 2025-01-17 18:41:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113845158942867513 2025-01-17 18:57:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2189 2025-01-17 19:15:52+00:00| seen|...

CERTFR-2025-ACT-002

creationtimestamp| type| source ---|---|--- 2025-01-17 16:45:05+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3lfxakzi2ev2w 2025-01-20 13:10:41+00:00| seen| https://bsky.app/profile/ag6218ent.bsky.social/post/3lg6fyfd7ww2y...

CVE-2024-37601

creationtimestamp| type| source ---|---|--- 2025-01-17 13:35:06+00:00| seen| https://poliverso.org/objects/0477a01e-45ff02b8-52616ac586aa8672 2025-01-20 18:30:05+00:00| seen| https://t.me/truesecator/6638 2025-02-13 23:15:47+00:00| seen|...

CVE-2024-52281

creationtimestamp| type| source ---|---|--- 2025-01-17 03:05:34+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lfvsrmnemd2z 2025-01-17 04:00:36+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lfvvtwzne22g 2025-01-17 04:19:42+00:00| seen|...

CVE-2024-51462

creationtimestamp| type| source ---|---|--- 2025-01-17 02:28:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113841334923797565 2025-01-17 02:56:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2092 2025-01-17 03:15:46+00:00| seen|...

CVE-2025-23955

creationtimestamp| type| source ---|---|--- 2025-01-16 21:21:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7jqboco2e 2025-01-16 21:49:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfvb47epkl2b 2025-01-16 22:56:01+00:00| seen|...

CVE-2025-23963

Missing Authorization vulnerability in flymke Mark Posts mark-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mark Posts: from n/a through = 2.2.4...

CVE-2025-23764

Missing Authorization vulnerability in ujjavaljani Copy Move Posts copy-move-posts.This issue affects Copy Move Posts: from n/a through = 1.6...

CVE-2025-23476

Cross-Site Request Forgery CSRF vulnerability in isnowfy my-related-posts my-related-posts allows Stored XSS.This issue affects my-related-posts: from n/a through = 1.1...

CVE-2025-23764 WordPress Copy Move Posts plugin <= 1.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in ujjavaljani Copy Move Posts copy-move-posts.This issue affects Copy Move Posts: from n/a through = 1.6...

CVE-2025-23476 WordPress my-related-posts plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in isnowfy my-related-posts my-related-posts allows Stored XSS.This issue affects my-related-posts: from n/a through = 1.1...

CVE-2025-23476

CVE-2025-23476 is a CSRF to Stored XSS vulnerability in the WordPress plugin my-related-posts (up to version 1.1). The CVSS 3.1 base score is 7.1 (High) with network attack vector, low attack complexity, and user interaction required. Affected software is the my-related-posts plugin for WordPress...