Wordfence Intelligence Weekly WordPress Vulnerability Report (July 21, 2025 to July 27, 2025)

Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...

CVE-2025-8068

creationtimestamp| type| source ---|---|--- 2025-07-31 13:57:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvbc5edeyr2q...

OSV-2025-584 Heap-buffer-overflow in isvcd_mark_err_slice_skip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=434978682 Crash type: Heap-buffer-overflow READ 2 Crash state: isvcdmarkerrsliceskip isvcdvideodecode Codec::decodeFrame...

PT-2025-32558 · Git · Libavc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=434978682 Crash type: Heap-buffer-overflow READ 2 Crash state: isvcd mark err slice skip isvcd video decode Codec::decodeFrame...

CVE-2025-53022

creationtimestamp| type| source ---|---|--- 2025-07-30 21:17:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv7kbheuf626...

CVE-2025-25692

creationtimestamp| type| source ---|---|--- 2025-07-30 21:16:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv7k7nmyhz2c...

RHSA-2024:2770

creationtimestamp| type| source ---|---|--- 2025-07-30 20:43:17+00:00| seen| Telegram/wxQaYy1tjhT0M4KVG-BbgczQx8gLkTuJ04i-scg9yzFqQY...

Exploit for CVE-2025-52390

🔍 Vulnerability Research & Security Disclosures by Harsh Koth...

CVE-2025-5394

creationtimestamp| type| source ---|---|--- 2025-07-30 13:38:35+00:00| seen| https://bsky.app/profile/undercodenews.bsky.social/post/3lv6qm47qod2y 2025-07-31 04:53:00+00:00| seen| https://thehackernews.com/2025/07/hackers-exploit-critical-wordpress.html 2025-07-31 08:01:33+00:00| seen|...

TrickBot Behind More Than $724 Million in Crypto Theft and Extortion

Akamai's latest Ransomware Report 2025 reveals "quadruple extortion," new AI-driven tactics by groups like Black Basta, FunkSec, and TrickBot, and growing threats to non-profits. Learn about evolving cyber threats...

CVE-2025-6348

creationtimestamp| type| source ---|---|--- 2025-07-30 10:57:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv6hmnazps2z...

CVE-2025-1394

creationtimestamp| type| source ---|---|--- 2025-07-30 10:52:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv6hdojrd22z...

CVE-2025-4423

creationtimestamp| type| source ---|---|--- 2025-07-30 03:17:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv5nuy552g2s 2025-07-30 04:31:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lv5s2a2nni2d...

CVE-2025-7993

creationtimestamp| type| source ---|---|--- 2025-07-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-726/...

CVE-2025-45768

creationtimestamp| type| source ---|---|--- 2025-07-30 01:53:20+00:00| seen| https://gist.github.com/ZupeiNie/6f65e564f2067b876321d3dfdbb76569 2025-07-31 23:47:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvcd3qaw7i2e...

OSV-2025-581 UNKNOWN READ in tidy_fuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=434741279 Crash type: UNKNOWN READ Crash state: tidyfuzzer...

Apple iOS < 18.6 Multiple Vulnerabilities (124147)

Binary data appleios186check.nbin...

PT-2025-31434 · Unknown · Getprojectsidea Create School Management System

Name of the Vulnerable Software and Affected Versions: GetProjectsIdea Create School Management System version 1.0 Description: The application is susceptible to a Cross Site Scripting XSS issue within the my profile update form1.php file. Recommendations: Update to a newer version that contains ...

SUSE CVE-2025-38406

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If the firmware gives bad input, that's nothing to do with the driver's stack at this point etc., so the WARNON doesn't add any value. Additionally, this is one of the top syzbot...

GO-2025-3817 Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana

Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports fro...