CVE-2025-49991

creationtimestamp| type| source ---|---|--- 2025-06-23 17:45:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19239...

CVE-2025-6516

creationtimestamp| type| source ---|---|--- 2025-06-23 17:45:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19234...

CVE-2024-4025

creationtimestamp| type| source ---|---|--- 2025-06-20 18:42:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19040...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the handleNewCR function. An attacker can execute arbitrary commands by submitting a specially crafted custom resource with malicious input fields that can escape the constructed lmeval command. Note: Successful...

CVE-2025-6343

creationtimestamp| type| source ---|---|--- 2025-06-20 13:42:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18938 2025-06-20 14:01:22+00:00| published-proof-of-concept| Telegram/EU-zgTYNCuMk0kPjRTySzOYv7Iu8ZX1tIJJX1sw0XVgQw8...

WordPress UpStream: a Project Management Plugin for WordPress plugin <= 2.1.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin UpStream: a Project Management Plugin for WordPress versions = 2.1.1...

WordPress WPThumb plugin <= 0.10 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by domiee13 in WordPress Plugin WPThumb versions = 0.10...

WordPress PowerPress Podcasting plugin <= 11.13.11 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by Anhchangmutrang in WordPress Plugin PowerPress Podcasting versions = 11.13.11...

WordPress Esselink.nu Settings plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Esselink.nu Settings versions = 3.6...

CVE-2025-49590

creationtimestamp| type| source ---|---|--- 2025-06-18 22:41:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18815...

CVE-2023-5028

creationtimestamp| type| source ---|---|--- 2025-06-18 14:41:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18740...

GHSA-5GW5-JCCF-6HXW

creationtimestamp| type| source ---|---|--- 2025-06-17 19:39:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18654...

WordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin <= 19.9.0 - Incorrect Authorization to Authenticated (Contributor+) Plugin Settings Update vulnerability

Incorrect Authorization to Authenticated Contributor+ Plugin Settings Update vulnerability discovered by Amin Beheshti in WordPress Plugin Poll, Survey & Quiz Maker Plugin by Opinion Stage versions = 19.9.0...

CVE-2025-6159

creationtimestamp| type| source ---|---|--- 2025-06-17 04:41:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18562 2025-06-17 05:03:25+00:00| published-proof-of-concept| Telegram/pYQ5CN5t9bb4-cxTyvmjmPi-QJHWeAchXbT1rfCyTmPGt4...

CVE-2025-6153

creationtimestamp| type| source ---|---|--- 2025-06-17 02:38:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18559 2025-06-17 03:02:49+00:00| published-proof-of-concept| Telegram/yixXk03Px4jmK8hy8DNQOPYwyMdQ2hxkl47WHo8gYnS6T9E...

CVE-2024-25712

creationtimestamp| type| source ---|---|--- 2025-06-16 18:38:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18491...

WordPress kk Youtube Video plugin <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin kk Youtube Video versions = 0.2...

GHSA-MVP5-QX9C-C3FV

creationtimestamp| type| source ---|---|--- 2025-06-13 17:38:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18322 2025-06-13 18:01:53+00:00| published-proof-of-concept| Telegram/BdAJvjHyhFMVsKfZl02ptmuMNqjhviASPolesySVDo2DxO4...

CVE-2025-46096

creationtimestamp| type| source ---|---|--- 2025-06-13 13:33:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18294...

WordPress Color Palette plugin <= 4.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via hex Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via hex Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Color Palette versions = 4.3.2...