WordPress Mayosis Core plugin <= 5.4.1 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Tonn in WordPress Plugin Mayosis Core versions = 5.4.1...

CVE-2022-44277

creationtimestamp| type| source ---|---|--- 2025-04-24 21:07:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13357...

CVE-2025-46483

creationtimestamp| type| source ---|---|--- 2025-04-24 20:06:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13333...

WordPress Social Counter plugin <= 2.0.5 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Social Counter versions = 2.0.5...

WordPress WP Custom Post Popup plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by johska in WordPress Plugin WP Custom Post Popup versions = 1.0.1...

CVE-2025-46473

creationtimestamp| type| source ---|---|--- 2025-04-24 17:06:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13287...

Published Desktop Randomly Disconnects with Event ID 1 - ICA Client (Vanadium)

Users running on thin clients using the maximum supported monitors for the device, each at at the maximum supported resolution, may be disconnect from the Published Desktop at random.At the time of the disconnect the endpoint device event log records: Event ID 1 from source ICA Client Vanadium wi...

WordPress My Tickets plugin <= 2.0.16 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Le Ngoc Anh in WordPress Plugin My Tickets versions = 2.0.16...

GHSA-CM9W-C4RJ-R2CF

creationtimestamp| type| source ---|---|--- 2025-04-23 19:05:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13120...

GHSA-5FHJ-G3P3-PQ9G

creationtimestamp| type| source ---|---|--- 2025-04-23 18:05:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13094...

CVE-2022-36005

creationtimestamp| type| source ---|---|--- 2025-04-23 17:04:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13079...

GHSA-H7FF-CFC9-WMMH

creationtimestamp| type| source ---|---|--- 2025-04-23 17:04:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13071...

CVE-2022-45009

creationtimestamp| type| source ---|---|--- 2025-04-23 14:05:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13035...

CVE-2022-44849

creationtimestamp| type| source ---|---|--- 2025-04-23 14:05:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13032...

CVE-2025-46567

creationtimestamp| type| source ---|---|--- 2025-04-23 08:41:15+00:00| published-proof-of-concept| https://github.com/hiyouga/LlamaFactory/security/advisories/GHSA-f2f7-gj54-6vpv...

GHSA-59JR-PJ65-QMVR

creationtimestamp| type| source ---|---|--- 2025-04-22 19:03:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12946...

GHSA-92P9-X79H-2MJ8

creationtimestamp| type| source ---|---|--- 2025-04-22 16:03:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12877...

WordPress Control Listings plugin <= 1.0.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Aiden Thái An in WordPress Plugin Control Listings versions = 1.0.4.1...

WordPress Download Alt Text AI plugin <= 1.9.93 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Download Alt Text AI versions = 1.9.93...

WordPress Event post plugin <= 5.9.11 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by astra.r3verii in WordPress Plugin Event post versions = 5.9.11...