CVE-2025-47454

creationtimestamp| type| source ---|---|--- 2025-05-07 17:22:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15356...

WordPress ContentStudio plugin <= 1.3.5 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Contentstudio versions = 1.3.5...

WordPress 워드프레스 결제 심플페이 plugin <= 5.2.11 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin 워드프레스 결제 심플페이 versions = 5.2.11...

CVE-2025-47457

creationtimestamp| type| source ---|---|--- 2025-05-07 15:22:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15329...

WordPress Open Close WooCommerce Store plugin <= 4.9.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Open Close WooCommerce Store versions = 4.9.9...

WordPress List category posts plugin <= 0.91.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin List category posts versions = 0.91.0...

WordPress Meks Flexible Shortcodes plugin <= 1.3.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Meks Flexible Shortcodes versions = 1.3.6...

WordPress XT Event Widget for Social Events plugin <= 1.1.7 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by timomangcut in WordPress Plugin XT Event Widget for Social Events versions = 1.1.7...

WordPress GamiPress plugin <= 7.3.7 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by muhammad yudha in WordPress Plugin GamiPress versions = 7.3.7...

WordPress Product Time Countdown for WooCommerce plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Product Time Countdown for WooCommerce versions = 1.6.2...

WordPress Cost Calculator for Elementor plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Michael in WordPress Plugin Cost Calculator for Elementor versions = 1.3.3...

WordPress JupiterX Core plugin <= 4.8.11 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Michael in WordPress Plugin JupiterX Core versions = 4.8.11...

WordPress WP Gravity Forms Dynamics CRM plugin <= 1.1.4 - Open Redirection Vulnerability

Open Redirection Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP Gravity Forms Dynamics CRM versions = 1.1.4...

WordPress Simple File List plugin <= 6.1.13 - Settings Change Vulnerability

Settings Change Vulnerability discovered by Mika in WordPress Plugin Simple File List versions = 6.1.13...

WordPress Listamester plugin <= 2.3.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Listamester versions = 2.3.6...

WordPress Progress Bar plugin <= 2.2.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Progress Bar versions = 2.2.3...

WordPress Xavin's List Subpages plugin <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang in WordPress Plugin Xavin's List Subpages versions = 1.3...

GHSA-77Q8-QMJ7-X7PP

creationtimestamp| type| source ---|---|--- 2025-05-06 20:21:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15212...

CVE-2025-4333

creationtimestamp| type| source ---|---|--- 2025-05-06 14:21:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15127...

WordPress PGS Core plugin <= 5.8.0 - Missing Authorization via Multiple Functions vulnerability

Missing Authorization via Multiple Functions vulnerability discovered by István Márton in WordPress Plugin PGS Core versions = 5.8.0...