CVE-2025-23432

CVE-2025-23432 affects the WordPress plugin AlT Report (and its UI component “alt-report”). The vulnerability is a Reflected XSS due to improper input neutralization during web page generation, allowing injection via the plugin’s input surface. Affected range: from n/a through

CVE-2025-23432 WordPress AlT Report plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlTi5 AlT Report alt-report allows Reflected XSS.This issue affects AlT Report: from n/a through = 1.12.0...

CVE-2024-57682

creationtimestamp| type| source ---|---|--- 2025-01-16 18:56:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2002 2025-01-16 19:09:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113839610004775264 2025-01-16 19:16:10+00:00| seen|...

WordPress Debt Calculator plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Debt Calculator versions = 1.0.1...

WordPress Tax Report for WooCommerce plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv in WordPress Plugin Tax Report for WooCommerce versions = 2.2...

WordPress Cookie Consent & Autoblock for GDPR/CCPA plugin <= 1.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

CSRF to Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Cookie Consent & Autoblock for GDPR/CCPA versions = 1.0.1...

WordPress Ni WooCommerce Sales Report Email plugin <= 3.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Ni WooCommerce Sales Report Email versions = 3.1.4...

WordPress azurecurve Floating Featured Image plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv in WordPress Plugin azurecurve Floating Featured Image versions = 2.2.0...

WordPress AlT Report plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin AlT Report versions = 1.12.0...

CVE-2024-57775

creationtimestamp| type| source ---|---|--- 2025-01-16 17:49:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113839295385603825 2025-01-16 17:55:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1983 2025-01-16 18:16:08+00:00| seen|...

CVE-2024-57769

creationtimestamp| type| source ---|---|--- 2025-01-16 17:37:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113839246685053852 2025-01-16 17:55:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1994 2025-01-16 18:15:52+00:00| seen|...

CVE-2025-0518

creationtimestamp| type| source ---|---|--- 2025-01-16 16:51:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113839065929367762 2025-01-16 16:55:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1968 2025-01-16 17:15:26+00:00| seen|...

CVE-2024-57159

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery CSRF via /erp.07fly.net:80/oa/OaWorkReport/add.html...

Wordfence Intelligence Weekly WordPress Vulnerability Report (January 6, 2025 to January 12, 2025)

Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...

CISA and Partners Release Call to Action to Close the National Software Understanding Gap

Today, CISA—in partnership with the Defense Advanced Research Projects Agency DARPA, the Office of the Under Secretary of Defense for Research and Engineering OUSD R&E, and the National Security Agency NSA—published Closing the Software Understanding Gap. This report urgently implores the U.S...

CVE-2021-31316

creationtimestamp| type| source ---|---|--- 2025-01-16 09:29:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-31316.yaml 2025-01-20 21:01:59+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad55db42d...

CVE-2025-22905

creationtimestamp| type| source ---|---|--- 2025-01-16 03:08:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113835827933774232 2025-01-16 03:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lftcuj4r4t2f 2025-01-16 03:48:42+00:00| seen|...

CVE-2025-0457

creationtimestamp| type| source ---|---|--- 2025-01-16 02:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lft7jxnioo2n 2025-01-16 02:17:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113835629655442023 2025-01-16 02:48:42+00:00| seen|...

OSV-2025-33 UNKNOWN READ in pcpp::RawPacket::insertData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390004170 Crash type: UNKNOWN READ Crash state: pcpp::RawPacket::insertData pcpp::Packet::extendLayer pcpp::BgpUpdateMessageLayer::setNetworkLayerReachabilityInfo...

PT-2025-3405 · 07Flycms · 07Flycms

Name of the Vulnerable Software and Affected Versions: 07FLYCMS version 1.3.9 Description: A Cross-Site Request Forgery CSRF issue was discovered in 07FLYCMS. The issue is related to the "/erp.07fly.net:80/oa/OaWorkReport/edit.html" API endpoint. Recommendations: For 07FLYCMS version 1.3.9,...