WordPress MyBookProgress by Stormhill Media plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin MyBookProgress by Stormhill Media versions = 1.0.8...

WordPress Modula Image Gallery plugin <= 2.10.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox 5 JavaScript Library vulnerability

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via FancyBox 5 JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin Modula Image Gallery versions = 2.10.1...

WordPress Calculated Fields Form plugin < 5.2.64 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Calculated Fields Form versions 5.2.64...

CVE-2021-24881

creationtimestamp| type| source ---|---|--- 2025-04-02 15:33:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10104...

CVE-2025-31085

creationtimestamp| type| source ---|---|--- 2025-04-02 14:34:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10088...

WordPress WooTumblog plugin <= 2.1.4 - Content Injection vulnerability

Content Injection vulnerability discovered by Mika in WordPress Plugin WooTumblog versions = 2.1.4...

WordPress Botnet Attack Blocker plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Botnet Attack Blocker versions = 2.0.0...

WordPress MediaView plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin MediaView versions = 1.1.2...

WordPress wpForo Forum plugin <= 2.4.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Revan Arifio Patchstack Alliance in WordPress Plugin wpForo Forum versions = 2.4.2...

CVE-2025-31804

creationtimestamp| type| source ---|---|--- 2025-04-01 20:33:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10013...

CVE-2025-21973

creationtimestamp| type| source ---|---|--- 2025-04-01 19:45:19+00:00| published-proof-of-concept| https://t.me/cvedetector/21797...

CVE-2025-31833

creationtimestamp| type| source ---|---|--- 2025-04-01 19:32:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9996...

CVE-2023-24057

creationtimestamp| type| source ---|---|--- 2025-04-01 19:32:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9990...

CVE-2025-31813

creationtimestamp| type| source ---|---|--- 2025-04-01 18:32:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9967...

CVE-2025-31839

creationtimestamp| type| source ---|---|--- 2025-04-01 18:32:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9964...

WordPress Material Dashboard plugin <= 1.4.5 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin Material Dashboard versions = 1.4.5...

CVE-2025-30607

creationtimestamp| type| source ---|---|--- 2025-04-01 16:32:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9938...

WordPress Countdown & Clock plugin <=2.8.8 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by astra.r3verii in WordPress Plugin Countdown & Clock versions = 2.8.8...

WordPress Hyperlink Group Block plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Hyperlink Group Block versions = 2.0.1...

WordPress Norse Rune Oracle Plugin plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Norse Rune Oracle Plugin versions = 1.4.3...