19425 matches found
WordPress MStore API plugin <= 4.17.4 - Unauthenticated Limited Privilege Escalation vulnerability
Unauthenticated Limited Privilege Escalation vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin MStore API versions = 4.17.4...
WordPress KiwiChat NextClient plugin <= 6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via url Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin KiwiChat NextClient versions = 6.2...
CVE-2025-32883
creationtimestamp| type| source ---|---|--- 2025-05-01 18:15:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14362...
CVE-2025-32884
creationtimestamp| type| source ---|---|--- 2025-05-01 18:15:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14361...
CVE-2025-32886
creationtimestamp| type| source ---|---|--- 2025-05-01 18:15:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14357...
CVE-2022-3873
creationtimestamp| type| source ---|---|--- 2025-05-01 18:15:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14351...
CVE-2025-44841
creationtimestamp| type| source ---|---|--- 2025-05-01 17:15:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14335 2025-05-01 20:41:59+00:00| published-proof-of-concept| https://t.me/cvedetector/24257...
WordPress Homey Theme <= 2.4.4 is vulnerable to Broken Access Control
Software Homey Type Theme Vulnerable versions = 2.4.4 Fixed in 2.4.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2025-1326 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f04df5696a52 Credits a00n Required privilege Subscriber...
CVE-2021-25929
creationtimestamp| type| source ---|---|--- 2025-04-30 21:15:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14173...
WordPress Nautic Pages plugin <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by muhammad yudha in WordPress Plugin Nautic Pages versions = 2.0...
WordPress Page View Count plugin 2.8.0-2.8.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Missing Authorization to Authenticated Subscriber+ Limited Options Update vulnerability discovered by kr0d in WordPress Plugin Page View Count versions 2.8.0-2.8.4...
LVDA 2402 | Ubuntu VDAs taking a long time (2-3min) to login
Customer is experiencing unusual slow logon when launching a published desktop hosted on Ubuntu It typically takes about 2 to 3 minutes to login...
WordPress tagDiv Opt-In Builder plugin <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter vulnerability
Authenticated Subscriber+ SQL Injection via subscriptionCouponId Parameter vulnerability discovered by Truoc Phan in WordPress Plugin tagDiv Opt-In Builder versions = 1.7...
WordPress WP Statistics plugin <= 14.13.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary plugin Settings Update vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary plugin Settings Update vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Statistics versions = 14.13.3...
CVE-2022-45914
creationtimestamp| type| source ---|---|--- 2025-04-29 14:11:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13815...
GHSA-WMJQ-JRM2-9WFR
creationtimestamp| type| source ---|---|--- 2025-04-28 23:10:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13750...
Microsoft Edge browser closes unexpectedly inside Published Desktop when using FIDO2 Authentication
FIDO2 Redirection is enabled to authenticate web application inside Published Desktop. MSedge browser closes unexpectedly at the web application authentication page, no error message on the desktop nor in the Windows event log. This issue only occurs with MSedge. No issue with Chrome or Firefox...
WordPress Element Pack Elementor Addons plugin <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Element Pack Elementor Addons versions = 5.10.29...