19425 matches found
WordPress Aiomatic plugin <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability
Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by khanhhnahk1 in WordPress Plugin Aiomatic versions = 2.5.0...
GHSA-V62P-RQ8G-8H59
creationtimestamp| type| source ---|---|--- 2025-06-23 20:32:26+00:00| published-proof-of-concept| Telegram/O2eh7gLrpcZbONgN5-OX68m3ZbpQKWlr4HE62LMc1M7414...
GHSA-H7CP-R72F-JXH6
creationtimestamp| type| source ---|---|--- 2025-06-23 20:01:16+00:00| published-proof-of-concept| Telegram/1psvC7CezRzDdQQZmPDn29p4dA-tBW5Fsx58qYiO8Q7Mk...
CVE-2025-50021
creationtimestamp| type| source ---|---|--- 2025-06-23 19:46:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19252...
CVE-2025-49991
creationtimestamp| type| source ---|---|--- 2025-06-23 17:45:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19239...
CVE-2025-6516
creationtimestamp| type| source ---|---|--- 2025-06-23 17:45:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19234...
CVE-2024-4025
creationtimestamp| type| source ---|---|--- 2025-06-20 18:42:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19040...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the handleNewCR function. An attacker can execute arbitrary commands by submitting a specially crafted custom resource with malicious input fields that can escape the constructed lmeval command. Note: Successful...
CVE-2025-6343
creationtimestamp| type| source ---|---|--- 2025-06-20 13:42:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18938 2025-06-20 14:01:22+00:00| published-proof-of-concept| Telegram/EU-zgTYNCuMk0kPjRTySzOYv7Iu8ZX1tIJJX1sw0XVgQw8...
WordPress UpStream: a Project Management Plugin for WordPress plugin <= 2.1.1 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin UpStream: a Project Management Plugin for WordPress versions = 2.1.1...
WordPress WPThumb plugin <= 0.10 - Server Side Request Forgery (SSRF) Vulnerability
Server Side Request Forgery SSRF Vulnerability discovered by domiee13 in WordPress Plugin WPThumb versions = 0.10...
WordPress PowerPress Podcasting plugin <= 11.13.11 - Server Side Request Forgery (SSRF) Vulnerability
Server Side Request Forgery SSRF Vulnerability discovered by Anhchangmutrang in WordPress Plugin PowerPress Podcasting versions = 11.13.11...
WordPress Esselink.nu Settings plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Esselink.nu Settings versions = 3.6...
CVE-2025-49590
creationtimestamp| type| source ---|---|--- 2025-06-18 22:41:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18815...
CVE-2023-5028
creationtimestamp| type| source ---|---|--- 2025-06-18 14:41:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18740...
GHSA-5GW5-JCCF-6HXW
creationtimestamp| type| source ---|---|--- 2025-06-17 19:39:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18654...
WordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin <= 19.9.0 - Incorrect Authorization to Authenticated (Contributor+) Plugin Settings Update vulnerability
Incorrect Authorization to Authenticated Contributor+ Plugin Settings Update vulnerability discovered by Amin Beheshti in WordPress Plugin Poll, Survey & Quiz Maker Plugin by Opinion Stage versions = 19.9.0...
CVE-2025-6159
creationtimestamp| type| source ---|---|--- 2025-06-17 04:41:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18562 2025-06-17 05:03:25+00:00| published-proof-of-concept| Telegram/pYQ5CN5t9bb4-cxTyvmjmPi-QJHWeAchXbT1rfCyTmPGt4...
CVE-2025-6153
creationtimestamp| type| source ---|---|--- 2025-06-17 02:38:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18559 2025-06-17 03:02:49+00:00| published-proof-of-concept| Telegram/yixXk03Px4jmK8hy8DNQOPYwyMdQ2hxkl47WHo8gYnS6T9E...