WordPress Color Palette plugin <= 4.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via hex Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via hex Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Color Palette versions = 4.3.2...

WordPress Telegram for WP plugin <= 1.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Nabil Irawan in WordPress Plugin Telegram for WP versions = 1.6.1...

GHSA-P5G4-V748-6FH8

creationtimestamp| type| source ---|---|--- 2025-06-12 21:34:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18231...

CVE-2024-56158

creationtimestamp| type| source ---|---|--- 2025-06-12 15:33:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18174...

CVE-2025-49579

creationtimestamp| type| source ---|---|--- 2025-06-11 23:03:32+00:00| published-proof-of-concept| https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-g3cp-pq72-hjpv 2025-06-12 19:33:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18216...

GHSA-9FHC-F3MR-W6H6

creationtimestamp| type| source ---|---|--- 2025-06-11 14:31:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18077...

WordPress Premium Addons for Elementor plugin <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Countdown Widget vulnerability discovered by Asaf Mozes in WordPress Plugin Premium Addons for Elementor versions = 4.11.8...

WordPress Ruza Theme <= 1.0.7 is vulnerable to Local File Inclusion

Software Ruza Type Theme Vulnerable versions = 1.0.7 Fixed in 1.0.8 OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2025-49255 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 6bd5103cfe41 Credits Phat RiO - BlueRock Required privilege...

WordPress Zota Theme <= 1.3.8 is vulnerable to Local File Inclusion

Software Zota Type Theme Vulnerable versions = 1.3.8 Fixed in 1.3.9 OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2025-49257 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 511b31ea918b Credits Phat RiO - BlueRock Required privilege...

WordPress Aora Theme <= 1.3.9 is vulnerable to Local File Inclusion

Software Aora Type Theme Vulnerable versions = 1.3.9 Fixed in 1.3.10 OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2025-49260 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID c279fefa752d Credits Phat RiO - BlueRock Required privilege...

CVE-2025-5977

creationtimestamp| type| source ---|---|--- 2025-06-10 20:31:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17987...

GHSA-WJW6-95H5-4JPX

creationtimestamp| type| source ---|---|--- 2025-06-10 17:32:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17940...

CVE-2025-471737

creationtimestamp| type| source ---|---|--- 2025-06-10 16:45:25+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0189...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in several products such as RUGGEDCOM, SCALANCE, SIMATIC and Tecnomatix The vulnerabilities potentially enable a malicious person to carry out attacks that could lead to the following categories of damage: - Denial-of-Service DoS - Manipulation of data -...

CVE-2025-5913

creationtimestamp| type| source ---|---|--- 2025-06-10 04:29:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17826 2025-06-10 04:31:27+00:00| published-proof-of-concept| Telegram/SuCuNuYYG7YH6LF-PMvjYx2GIDz9A5wanFKy4pWUO100XY8...

CVE-2025-49282

creationtimestamp| type| source ---|---|--- 2025-06-09 20:31:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17776...

CVE-2025-24768

creationtimestamp| type| source ---|---|--- 2025-06-09 16:56:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17720...

CVE-2025-5886

creationtimestamp| type| source ---|---|--- 2025-06-09 16:56:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17712...

CVE-2025-49013

creationtimestamp| type| source ---|---|--- 2025-06-09 14:01:05+00:00| published-proof-of-concept| Telegram/wBaWWziweQgkSo7QapMU6ZNqlsB8QnkMAlvPkvlPpTVYk...

GHSA-QVJC-6XV7-6V5F

creationtimestamp| type| source ---|---|--- 2025-06-09 14:01:05+00:00| published-proof-of-concept| Telegram/wBaWWziweQgkSo7QapMU6ZNqlsB8QnkMAlvPkvlPpTVYk...