WordPress Control Listings plugin <= 1.0.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Aiden Thái An in WordPress Plugin Control Listings versions = 1.0.4.1...

WordPress Download Alt Text AI plugin <= 1.9.93 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Download Alt Text AI versions = 1.9.93...

WordPress Event post plugin <= 5.9.11 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by astra.r3verii in WordPress Plugin Event post versions = 5.9.11...

WordPress MPL-Publisher plugin <= 2.18.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin MPL-Publisher versions = 2.18.0...

WordPress wProject Theme < 5.8.0 is vulnerable to Privilege Escalation

Software wProject Type Theme Vulnerable versions 5.8.0 Fixed in 5.8.0 OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2025-39366 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID dc57f98abe0c Credits Dave Jong Patchstack Required privileg...

CVE-2022-40000

creationtimestamp| type| source ---|---|--- 2025-04-21 16:03:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12703...

influencemap.org Cross Site Scripting vulnerability OBB-4047457

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-5984-MHCP-CQ2X

creationtimestamp| type| source ---|---|--- 2025-04-18 16:58:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12489 2025-04-18 18:31:46+00:00| published-proof-of-concept| Telegram/7jNmJD5vjZVenNUqyYR0CPI9qktayZ3-idVdIxY76S8ayI...

WordPress AnalyticsWP plugin <= 2.1.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin AnalyticsWP versions = 2.1.2...

CVE-2025-38240

creationtimestamp| type| source ---|---|--- 2025-04-18 07:59:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12403...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to the improper verification of SignatureValue within SignerInfo. An attacker can manipulate the integrity of signed data by crafting a malicious signature that bypasses validation...

CVE-2022-23488

creationtimestamp| type| source ---|---|--- 2025-04-17 14:58:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12247...

WordPress Master Slider plugin <= 3.11.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Master Slider versions = 3.11.0...

WordPress Amazon Showcase WordPress Plugin plugin <= 2.2 - CSRF to XSS vulnerability

CSRF to XSS vulnerability discovered by johska Patchstack Alliance in WordPress Plugin Amazon Showcase WordPress Plugin versions = 2.2...

WordPress JetTabs plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin JetTabs versions = 2.2.7...

WordPress Bulk Page Stub Creator plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Bulk Page Stub Creator versions = 1.1...

CVE-2022-46536

creationtimestamp| type| source ---|---|--- 2025-04-16 19:56:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12150...

CVE-2025-29650

creationtimestamp| type| source ---|---|--- 2025-04-16 19:56:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12143...

WordPress Html5 Audio Player plugin <= 2.2.28 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Html5 Audio Player versions = 2.2.28...

WordPress WP Flipclock plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin WP Flipclock versions = 1.9.1...