CVE-2025-2874 User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 20240319 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2025-31334

creationtimestamp| type| source ---|---|--- 2025-04-03 05:36:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10162 2025-04-03 07:06:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llvdot4ddp2i 2025-04-03 08:06:50+00:00| seen|...

CVE-2025-2874: Improper Neutralization of Input During Web Page Generation

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 20240319 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2025-14601 · WordPress · User Submitted Posts

Name of the Vulnerable Software and Affected Versions: User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress versions up to, and including, 20240319 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input...

CVE-2025-20212

creationtimestamp| type| source ---|---|--- 2025-04-02 16:34:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10123 2025-04-02 19:07:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llu3i4oqlk2f 2025-04-02 20:50:34+00:00| seen| https://t.me/cvedetector/21899 2025-04-03...

CVE-2025-31570

Cross-Site Request Forgery CSRF vulnerability in wp-buy Related Posts Widget with Thumbnails advanced-css3-related-posts-widget allows Stored XSS.This issue affects Related Posts Widget with Thumbnails: from n/a through = 1.2...

CVE-2025-31569

Cross-Site Request Forgery CSRF vulnerability in wp-buy wordpress related Posts with thumbnails related-posts-list-grid-and-slider-all-in-one allows Stored XSS.This issue affects wordpress related Posts with thumbnails: from n/a through = 3.0.0.1...

CVE-2025-2005

creationtimestamp| type| source ---|---|--- 2025-04-02 09:34:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10046 2025-04-02 10:40:10+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llt75kfedt2s 2025-04-02 11:00:05+00:00| published-proof-of-concept|...

CVE-2024-39780

creationtimestamp| type| source ---|---|--- 2025-04-02 09:01:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llsznc7g3v2o 2025-04-02 09:48:16+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114267737002428971 2025-04-02 09:48:16+00:00| seen|...

CVE-2025-0676

creationtimestamp| type| source ---|---|--- 2025-04-02 07:18:48+00:00| seen| https://bsky.app/profile/potato.software/post/3llstvhe2jl2x 2025-04-02 09:01:02+00:00| seen| Telegram/mpFYB-4JgXHM75KT7V0syOZuBsPITcNEg0ye98mgfV1oCE 2025-04-02 09:01:36+00:00| seen|...

CVE-2025-3074

creationtimestamp| type| source ---|---|--- 2025-04-02 03:01:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llsfj27thy24 2025-04-02 04:07:03+00:00| seen| https://t.me/cvedetector/21835 2025-04-04 00:14:47+00:00| seen|...

CVE-2025-3068

creationtimestamp| type| source ---|---|--- 2025-04-02 03:01:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llsfizcvhi2s 2025-04-02 04:06:57+00:00| seen| https://t.me/cvedetector/21831 2025-04-03 13:34:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10197 2025-04-03...

CVE-2025-3066

creationtimestamp| type| source ---|---|--- 2025-04-02 03:01:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llsfiyxem627 2025-04-02 04:07:09+00:00| seen| https://t.me/cvedetector/21839 2025-04-02 05:51:40+00:00| seen|...

CVE-2025-30356

creationtimestamp| type| source ---|---|--- 2025-04-01 22:32:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10022 2025-04-01 22:57:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llrxufeglj2j 2025-04-01 23:40:24+00:00| seen|...

CVE-2025-31612

creationtimestamp| type| source ---|---|--- 2025-04-01 21:40:37+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llrtllgx5n2e 2025-04-01 22:57:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llrxuevpmv2o 2025-04-01 23:48:44+00:00| seen|...

CVE-2025-31553

creationtimestamp| type| source ---|---|--- 2025-04-01 21:40:34+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llrtlj6mrq2s 2025-04-01 22:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llrxudohnc24 2025-04-01 23:48:41+00:00| seen|...

CVE-2025-22871

creationtimestamp| type| source ---|---|--- 2025-04-01 16:54:39+00:00| seen| https://bsky.app/profile/golang.org/post/3llrdm6ttcs2i 2025-04-01 19:34:15+00:00| seen| https://bsky.app/profile/go-perf.dev/post/3llrmjmcles2e 2025-04-02 02:14:38+00:00| seen|...

CVE-2025-31131

creationtimestamp| type| source ---|---|--- 2025-04-01 16:32:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9944 2025-04-01 17:48:23+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114263962596198001 2025-04-01 17:48:23+00:00| seen|...

WordPress Gosign – Posts Slider Block plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Gosign – Posts Slider Block versions = 1.1.0...

CVE-2025-31891

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gosign Gosign – Posts Slider Block gosign-posts-slider-block allows Stored XSS.This issue affects Gosign – Posts Slider Block: from n/a through = 1.1.0...