19170 matches found
WordPress 워드프레스 결제 심플페이 plugin <= 5.2.11 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin 워드프레스 결제 심플페이 versions = 5.2.11...
CVE-2025-47457
creationtimestamp| type| source ---|---|--- 2025-05-07 15:22:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15329...
WordPress Open Close WooCommerce Store plugin <= 4.9.9 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Open Close WooCommerce Store versions = 4.9.9...
WordPress List category posts plugin <= 0.91.0 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin List category posts versions = 0.91.0...
WordPress Meks Flexible Shortcodes plugin <= 1.3.6 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Meks Flexible Shortcodes versions = 1.3.6...
WordPress XT Event Widget for Social Events plugin <= 1.1.7 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by timomangcut in WordPress Plugin XT Event Widget for Social Events versions = 1.1.7...
WordPress GamiPress plugin <= 7.3.7 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by muhammad yudha in WordPress Plugin GamiPress versions = 7.3.7...
WordPress Product Time Countdown for WooCommerce plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Product Time Countdown for WooCommerce versions = 1.6.2...
WordPress Cost Calculator for Elementor plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Michael in WordPress Plugin Cost Calculator for Elementor versions = 1.3.3...
WordPress JupiterX Core plugin <= 4.8.11 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Michael in WordPress Plugin JupiterX Core versions = 4.8.11...
WordPress WP Gravity Forms Dynamics CRM plugin <= 1.1.4 - Open Redirection Vulnerability
Open Redirection Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP Gravity Forms Dynamics CRM versions = 1.1.4...
WordPress Simple File List plugin <= 6.1.13 - Settings Change Vulnerability
Settings Change Vulnerability discovered by Mika in WordPress Plugin Simple File List versions = 6.1.13...
WordPress Listamester plugin <= 2.3.6 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Listamester versions = 2.3.6...
WordPress Progress Bar plugin <= 2.2.3 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Progress Bar versions = 2.2.3...
WordPress Xavin's List Subpages plugin <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang in WordPress Plugin Xavin's List Subpages versions = 1.3...
GHSA-77Q8-QMJ7-X7PP
creationtimestamp| type| source ---|---|--- 2025-05-06 20:21:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15212...
CVE-2025-4333
creationtimestamp| type| source ---|---|--- 2025-05-06 14:21:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15127...
WordPress PGS Core plugin <= 5.8.0 - Missing Authorization via Multiple Functions vulnerability
Missing Authorization via Multiple Functions vulnerability discovered by István Márton in WordPress Plugin PGS Core versions = 5.8.0...
MAL-2025-3659 Malicious code in your-published-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cffcefb87ba1dfcfc4089b98727de2186cb5179c69a0f7630c359ff62ba3546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
