WordPress Social Proof (Testimonials) Slider plugin <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Social Proof Testimonial Slider versions = 2.2.4...

Exploit for CVE-2024-50251

CVE-2024-...

PT-2024-8082 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a Windows Registry Elevation of Privilege vulnerability, which is caused by errors in synchronization when using a shared resource. This vulnerability can be exploit...

WordPress Social Proof (Testimonial) Slider Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)

Software Social Proof Testimonial Slider Type Plugin Vulnerable versions = 2.2.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8985 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f9e80ae8f878 Credits Peter...

Citrix-Virtual-Apps-XEN-Exploit

CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN Unauthen...

PT-2024-40198 · Sp1 · Sp1

Name of the Vulnerable Software and Affected Versions: SP1 versions prior to 3.0.0 Description: The issue arises during proof generation, where the prover must observe all values sent to the verifier to generate valid Fiat-Shamir challenges. In versions prior to 3.0.0, the cumulative sum of the...

CVE-2024-44258

creationtimestamp| type| source ---|---|--- 2024-11-07 17:03:43+00:00| published-proof-of-concept| https://t.me/CNArsenal/3423 2024-11-07 18:35:05+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11404 2026-05-13 09:00:04+00:00| seen|...

Announcing The Wordfence Audit Log: Off-Site Real-Time Security Event Logging for WordPress

Today the Wordfence team is proud to announce an exciting new feature: The Wordfence Audit Log, included in the Wordfence 8.0 release. The audit log captures and stores security-related events on your website as they happen, and sends them securely to an off-site location to protect them from...

CVE-2024-51501

creationtimestamp| type| source ---|---|--- 2024-11-05 01:19:12+00:00| published-proof-of-concept| https://t.me/cvedetector/9800...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to insufficient filtering of data. Note: This is exploitable only if the code is executed outside of Drupal; the function is intended to be shared between Drupal and Pattern Lab. The package...

Exploit for CVE-2024-48326

CVE-2024-48326 Description: Portabilis i-Educar v2.8.0...

CVE-2020-11519

creationtimestamp| type| source ---|---|--- 2024-11-02 15:33:17+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1407 2026-07-18 15:00:04+00:00| seen| https://t.me/reverseame/274 2026-07-19 00:00:12+00:00| published-proof-of-concept| https://t.me/reverseame/274 2026-09-01...

CVE-2020-3957

creationtimestamp| type| source ---|---|--- 2024-11-02 15:24:59+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1372...

CSRF ON SIGNUP PAGE

CSRF ON CREATING A NEW USER in mlflow/mlflow Reported on Oct 31st 2024 The Signup feature of Mlflow is vulnerable to CSRF attack that allow attacker to create a new account. This may be used to perform unauthorised actions on behalf of the malcious user . Proof of Concept : An attacker can use CS...

CVE-2020-12862

creationtimestamp| type| source ---|---|--- 2024-10-31 04:43:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1364...

CVE-2020-12861

creationtimestamp| type| source ---|---|--- 2024-10-31 04:43:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1364...

CVE-2020-6458

creationtimestamp| type| source ---|---|--- 2024-10-31 04:28:50+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1362...

CVE-2020-6555

creationtimestamp| type| source ---|---|--- 2024-10-31 04:16:04+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1911...

CVE-2020-12828

creationtimestamp| type| source ---|---|--- 2024-10-31 02:10:22+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1349...

CVE-2020-5825

creationtimestamp| type| source ---|---|--- 2024-10-31 01:54:06+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1319 2026-08-02 14:30:00+00:00| published-proof-of-concept| https://t.me/hackersmeet0/1811 2026-08-03 02:07:07+00:00| published-proof-of-concept|...