19425 matches found
WordPress LA-Studio Element Kit for Elementor plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Compare and Google Maps Widgets vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Image Compare and Google Maps Widgets vulnerability discovered by Robert DeVore in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.5.2...
WordPress LA-Studio Element Kit for Elementor plugin <= 1.5.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-lakit-element-link Parameter vulnerability
Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting via data-lakit-element-link Parameter vulnerability discovered by Webbernaut in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.5.2...
WordPress QuickCab plugin <= 1.3.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin QuickCab versions = 1.3.3...
WordPress MStore API plugin <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creation vulnerability
Missing Authorization to Authenticated Subscriber+ Posts Creation vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin MStore API versions = 4.17.5...
Deserialization of Untrusted Data
Overview inspiremusic is an InspireMusic: A Fundamental Music, Song and Audio Generation Framework and Toolkits Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the load function in the file cli/model.py. An attacker can manipulate internal data...
WordPress eMagicOne Store Manager for WooCommerce plugin <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file() vulnerability
Unauthenticated Arbitrary File Upload via setfile vulnerability discovered by Ryan Kozak in WordPress Plugin eMagicOne Store Manager versions = 1.2.5...
WordPress Smart Forms plugin <= 2.6.98 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability
Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Joel Indra in WordPress Plugin Smart Forms versions = 2.6.98...
WordPress WP SMTP plugin <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting via Email vulnerability
Unauthenticated Stored Cross-Site Scripting via Email vulnerability discovered by zer0gh0st in WordPress Plugin WP SMTP versions = 2.1.5...
WordPress Pagelayer plugin <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Link vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Button Link vulnerability discovered by zer0gh0st in WordPress Plugin PageLayer versions = 2.0.0...
CVE-2025-31060
creationtimestamp| type| source ---|---|--- 2025-05-23 14:05:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17388...
CVE-2021-24374
The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhgvcs that allowed the comments of non-published...
CVE-2024-40459
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17358...
CVE-2022-40102
creationtimestamp| type| source ---|---|--- 2025-05-22 17:43:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17321...
CVE-2022-41340
creationtimestamp| type| source ---|---|--- 2025-05-22 14:44:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17301...
CVE-2025-5079
creationtimestamp| type| source ---|---|--- 2025-05-22 14:43:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17282...
CVE-2025-0679
creationtimestamp| type| source ---|---|--- 2025-05-22 14:43:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17278...
CVE-2024-12093
creationtimestamp| type| source ---|---|--- 2025-05-22 14:43:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17276...
WordPress ReDi Restaurant Reservation plugin <= 24.1209 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Ryan Novotny in WordPress Plugin ReDi Restaurant Reservation versions = 24.1209...