CVE-2025-30741

Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhere in the Fediverse, if they otherwise have any followers from a Pixelfed instance...

PT-2025-12832

Name of the Vulnerable Software and Affected Versions Pixelfed versions prior to 0.12.5 Description The issue allows anyone to follow private accounts and see private posts on other Fediverse servers, affecting users elsewhere in the Fediverse if they have followers from a Pixelfed instance...

Pixelfed security vulnerabilities

Pixelfed is a free and ethical photo sharing platform from the individual developers of Pixelfed. A security vulnerability exists in versions of Pixelfed prior to 0.12.5 that stems from the fact that anyone can follow private accounts on other Fediverse servers and view private posts...

CVE-2025-30741: Incorrect Authorization

Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhere in the Fediverse, if they otherwise have any followers from a Pixelfed instance...

CVE-2025-26512

creationtimestamp| type| source ---|---|--- 2025-03-24 22:23:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8562 2025-03-24 22:48:14+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114219843195697793 2025-03-24 23:40:25+00:00| seen|...

WordPress Directorist plugin <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing vulnerability

Missing Authorization to Unauthenticated Arbitrary Post Publishing vulnerability discovered by mikemyers in WordPress Plugin Directorist versions = 8.2...

CVE-2024-53679

creationtimestamp| type| source ---|---|--- 2025-03-24 18:00:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ll5dlhfbyx2t 2025-03-25 10:24:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8637 2025-03-25 10:54:28+00:00| seen|...

CVE-2024-53678

creationtimestamp| type| source ---|---|--- 2025-03-24 18:00:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ll5dlh3oqr2k 2025-03-25 10:24:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8638 2025-03-25 10:54:29+00:00| seen|...

CVE-2025-24513

creationtimestamp| type| source ---|---|--- 2025-03-24 17:55:00+00:00| seen| https://thehackernews.com/2025/03/critical-ingress-nginx-controller.html 2025-03-24 21:56:48+00:00| seen| https://bsky.app/profile/lookitup.baby/post/3ll5qr5t6uk2k 2025-03-24 22:01:06+00:00| seen|...

CVE-2025-30615

creationtimestamp| type| source ---|---|--- 2025-03-24 14:40:12+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3ll4yei7uor2m 2025-03-24 14:48:31+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114217956886758868 2025-03-24 16:39:36+00:00| seen|...

CVE-2025-30602

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alphasis Related Posts via Categories related-posts-via-categories allows Stored XSS.This issue affects Related Posts via Categories: from n/a through = 2.1.2...

CVE-2025-30602

CVE-2025-30602 is a stored XSS in the WordPress plugin Related Posts via Categories (vulnerable up to 2.1.2; root cause: improper input neutralization during web page generation). Impact is cross-site scripting (low- to high-impact user data/session risk per CVSS 3.1: HIGH, 7.1). No exploitation ...

WordPress Related Posts via Categories plugin <= 2.1.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Related Posts via Categories versions = 2.1.2...

CVE-2025-2681

creationtimestamp| type| source ---|---|--- 2025-03-24 05:30:30+00:00| seen| Telegram/-BH2xfZualv0FtknMT93NmuRcs1qQQpmOW2m0bL-A1YU30 2025-03-24 05:51:32+00:00| seen| https://t.me/cvedetector/20932 2025-03-24 08:24:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll4de2f5uy2l...

PT-2025-12641

Name of the Vulnerable Software and Affected Versions alphasis Related Posts via Categories versions n/a through 2.1.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This affects the alphasi...

CVE-2025-30602: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alphasis Related Posts via Categories related-posts-via-categories allows Stored XSS.This issue affects Related Posts via Categories: from n/a through = 2.1.2...

CVE-2023-48292

creationtimestamp| type| source ---|---|--- 2025-03-23 22:13:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/23452 2025-03-24 04:00:05+00:00| published-proof-of-concept| Telegram/w1bL0ZfQbZjC6kNLjY6qJg4sGK5mjn3UxkyFp-Fo5l10hpw 2025-03-29 12:26:01+00:00| seen|...

CVE-2025-27553

creationtimestamp| type| source ---|---|--- 2025-03-23 16:50:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ll2p6j3kbl2v 2025-03-23 18:09:21+00:00| seen| https://t.me/cvedetector/20902 2025-03-24 13:05:24+00:00| seen|...

CVE-2025-2618

creationtimestamp| type| source ---|---|--- 2025-03-22 14:40:12+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkxxgn4y5n2v 2025-03-22 14:48:42+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114206632948653692 2025-03-22 15:00:26+00:00|...

CVE-2025-2303

creationtimestamp| type| source ---|---|--- 2025-03-22 07:38:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uyg7zf2j 2025-03-22 07:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uz6uu526 2025-03-22 08:48:26+00:00| seen|...