CVE-2024-12088

creationtimestamp| type| source ---|---|--- 2025-01-14 17:17:49+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113827844477308185 2025-01-14 18:09:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1553 2025-01-14 18:15:50+00:00| seen|...

WordPress Posts Footer Manager Plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pham Van Tam Patchstack Alliance in WordPress Plugin Posts Footer Manager versions = 2.1.0...

CVE-2024-23106

creationtimestamp| type| source ---|---|--- 2025-01-14 14:16:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgune3il2b 2025-01-14 14:28:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113827178052524738 2025-01-14 14:32:59+00:00| seen|...

CVE-2025-0147

creationtimestamp| type| source ---|---|--- 2025-01-14 11:28:49+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lfp5iqgtcn2n 2025-01-15 07:03:45+00:00| seen| https://t.me/CyberBulletin/2077 2025-01-15 19:34:06+00:00| seen|...

CVE-2025-0142

creationtimestamp| type| source ---|---|--- 2025-01-14 11:28:39+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lfp5igdsmy2m 2025-01-22 17:54:36+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113873287621870613 2025-01-30 19:43:38+00:00| seen|...

CVE-2025-0430

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-04 2025-01-17 17:41:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113844925428063721 2025-01-17 17:57:24+00:00| seen|...

CVE-2024-45385

creationtimestamp| type| source ---|---|--- 2025-01-14 10:32:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113826249828255649 2025-01-14 10:36:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113826265616304136 2025-01-14 11:08:27+00:00| seen|...

CVE-2024-12398

creationtimestamp| type| source ---|---|--- 2025-01-14 02:08:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1451 2025-01-14 02:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo6lt7ovy2b 2025-01-14 02:48:14+00:00| seen|...

PT-2025-3864

Name of the Vulnerable Software and Affected Versions Royal Elementor Addons and Templates plugin for WordPress versions up to, and including, 1.7.1006 Description The issue is due to missing or incorrect nonce validation on the wpr filter grid posts function, making it possible for unauthenticat...

CVE-2023-42225

creationtimestamp| type| source ---|---|--- 2025-01-13 22:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfnr64c2ip2n 2025-01-14 13:20:32+00:00| seen| https://bsky.app/profile/gothburz.bsky.social/post/3lfpdqhldgx27...

RHSA-2024:5951

creationtimestamp| type| source ---|---|--- 2025-01-13 21:12:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1393 2025-02-25 08:25:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5260...

CVE-2024-12566

creationtimestamp| type| source ---|---|--- 2025-01-13 06:05:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113819537157281010 2025-01-13 06:06:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1353 2025-01-13 06:10:26+00:00| seen|...

CVE-2025-22777

creationtimestamp| type| source ---|---|--- 2025-01-12 02:00:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lfj4t5mkxy2m 2025-01-12 04:06:22+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lfjdtjnyzk27 2025-01-12 05:12:37+00:00| seen|...

CVE-2025-0390

creationtimestamp| type| source ---|---|--- 2025-01-11 08:03:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1277 2025-01-11 08:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbdrigop2e 2025-01-11 08:49:06+00:00| seen|...

CVE-2024-12116

The CVE-2024-12116 vulnerability in Unlimited Theme Addon For Elementor and WooCommerce (WordPress) allows Information Exposure via the uta-template shortcode in all versions up to 1.2.1. Exploitation requires Contributor-level authentication. A fix exists in version 1.2.2 (and later) per Wordfen...

CVE-2024-12472

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphrduplicatepost due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-level access...

WordPress plugin RRAddons for Elementor has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-1861 · WordPress · Post Duplicator

Name of the Vulnerable Software and Affected Versions: Post Duplicator plugin for WordPress version 2.36 and earlier Description: The issue is related to Information Exposure due to insufficient restrictions on which posts can be duplicated, making it possible for authenticated attackers with...

PT-2025-1753 · WordPress · The Unlimited Theme Addon For Elementor/Woocommerce

Name of the Vulnerable Software and Affected Versions: The Unlimited Theme Addon For Elementor and WooCommerce plugin for WordPress versions up to, and including, 1.2.1 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from private or...

PT-2025-1713 · WordPress · Rraddons For Elementor

Name of the Vulnerable Software and Affected Versions: RRAddons for Elementor plugin for WordPress version 1.1.0 and earlier Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from private or draft posts due to insufficient restrictions o...