WordPress Hyperlink Group Block plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Hyperlink Group Block versions = 2.0.1...

WordPress Norse Rune Oracle Plugin plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Norse Rune Oracle Plugin versions = 1.4.3...

WordPress Directorist AddonsKit for Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Yusuf in WordPress Plugin Directorist AddonsKit for Elementor versions = 1.1.6...

WordPress Nova Blocks by Pixelgrade plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Nova Blocks versions = 2.1.8...

WordPress Ship Per Product plugin <= 2.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Ship Per Product versions = 2.1.0...

WordPress Boo Recipes plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Boo Recipes versions = 2.4.1...

WordPress News, Magazine and Blog Elements Plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin News, Magazine and Blog Elements versions = 1.3...

WordPress Small Package Quotes – Worldwide Express Edition plugin <= 5.2.18 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Small Package Quotes – Worldwide Express Edition versions = 5.2.18...

CVE-2016-8858

creationtimestamp| type| source ---|---|--- 2025-04-01 08:49:50+00:00| published-proof-of-concept| https://t.me/MalaysiaHacktivistz/2960 2025-04-01 08:49:50+00:00| published-proof-of-concept| https://t.me/MalaysiaHacktivistz/10573...

WordPress Themify Edmin Theme <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Themify Edmin Type Theme Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31013 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 812b4ccf0f46 Credits Tran Nguyen Bao Khanh VCI - VNPT Cybe...

WordPress Themify Folo Theme <= 1.9.6 is vulnerable to Cross Site Scripting (XSS)

Software Themify Folo Type Theme Vulnerable versions = 1.9.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31013 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6a066edc64f9 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

CVE-2024-54804

creationtimestamp| type| source ---|---|--- 2025-03-31 21:31:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9775...

CVE-2024-54806

creationtimestamp| type| source ---|---|--- 2025-03-31 21:31:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9773...

CVE-2024-54808

creationtimestamp| type| source ---|---|--- 2025-03-31 21:31:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9771...

WordPress Import Export Suite for CSV and XML Datafeed plugin <= 7.19 - Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Authenticated Subscriber+ Arbitrary File Deletion vulnerability discovered by mikemyers in WordPress Plugin WP Ultimate CSV Importer versions = 7.19...

CVE-2025-31595

creationtimestamp| type| source ---|---|--- 2025-03-31 15:31:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9682...

CVE-2025-31593

creationtimestamp| type| source ---|---|--- 2025-03-31 15:31:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9681...

GHSA-5Q9W-F4WH-F535

creationtimestamp| type| source ---|---|--- 2025-03-31 15:31:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9680...

CVE-2025-2995

creationtimestamp| type| source ---|---|--- 2025-03-31 14:31:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9653...

WordPress Real Estate 7 Theme <= 3.5.4 is vulnerable to Arbitrary File Upload

Software Real Estate 7 Type Theme Vulnerable versions = 3.5.4 Fixed in 3.5.5 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2025-2891 Patch priority Medium CVSS severity Medium 8.8 Developer Claim ownership PSID 22e03f3e7c10 Credits Foxyyy Required privilege Seller...