WordPress plugin EZ SQL Reports Shortcode Widget and DB Backup 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-24514

creationtimestamp| type| source ---|---|--- 2025-03-24 17:55:00+00:00| seen| https://thehackernews.com/2025/03/critical-ingress-nginx-controller.html 2025-03-24 21:56:48+00:00| seen| https://bsky.app/profile/lookitup.baby/post/3ll5qr5t6uk2k 2025-03-24 22:01:06+00:00| seen|...

CVE-2025-30474

creationtimestamp| type| source ---|---|--- 2025-03-23 16:50:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ll2p6jo5fy2j 2025-03-23 18:09:20+00:00| seen| https://t.me/cvedetector/20901 2025-03-23 18:14:26+00:00| seen|...

CVE-2025-2620

creationtimestamp| type| source ---|---|--- 2025-03-22 15:40:20+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lky2s5a6fy2v 2025-03-22 16:00:37+00:00| seen| Telegram/yI8ddaBBZUFrz-0VzdopTdwt32Plsy-4m3Oi8ASzTzdUwoY 2025-03-22 16:48:31+00:00| seen|...

PT-2025-12481 · Givewp · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions up to, and including, 3.22.1 Description: The issue allows authenticated attackers with Subscriber-level access and above to extract sensitive data, including reports detailing donors...

CVE-2025-29927

creationtimestamp| type| source ---|---|--- 2025-03-21 15:40:16+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkvkd4ny2y2v 2025-03-21 15:45:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114201195359591645 2025-03-21 16:48:51+00:00| seen|...

CVE-2025-30346

creationtimestamp| type| source ---|---|--- 2025-03-21 07:19:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8323 2025-03-21 10:07:39+00:00| seen| https://t.me/cvedetector/20795 2025-03-21 11:23:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkv3yffyyj2j 2025-04-02...

CVE-2025-2311

creationtimestamp| type| source ---|---|--- 2025-03-20 12:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkspsiq2ef2v 2025-03-20 13:03:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114194893182150078 2025-03-20 13:58:39+00:00| seen|...

CVE-2025-2505

creationtimestamp| type| source ---|---|--- 2025-03-20 08:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkscf7ljn32v 2025-03-20 09:03:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomzswc26 2025-03-20 09:30:37+00:00| published-proof-of-concept|...

SUSE-SU-2025:0942-1 Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059150 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpioid before used as array index bsc1231204. - CVE-2021-47261: Fix initializing CQ fragments buffer bsc1224954 - CVE-2024-50302: HID: core:...

WordPress Give plugin <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function vulnerability

Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via givereportsearnings Function vulnerability discovered by mikemyers in WordPress Plugin GiveWP versions = 3.22.0...

cockpit security update

An update is available for cockpit. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Cockpit enables users to administer GNU/Linux servers using a web browser. It...

CVE-2025-2025

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the givereportsearnings function in all versions up to, and including, 3.22.0. This makes it possible for unauthenticated attackers to...

CVE-2025-2370

creationtimestamp| type| source ---|---|--- 2025-03-16 13:09:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114172267350542304 2025-03-17 09:46:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkkuom7b4s2s 2025-03-17 09:46:58+00:00| published-proof-of-concept|...

CVE-2025-2025

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the givereportsearnings function in all versions up to, and including, 3.22.0. This makes it possible for unauthenticated attackers to...

CVE-2025-2025

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the givereportsearnings function in all versions up to, and including, 3.22.0. This makes it possible for unauthenticated attackers to...

CVE-2025-2025 Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the givereportsearnings function in all versions up to, and including, 3.22.0. This makes it possible for unauthenticated attackers to...

CVE-2025-2025 Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the givereportsearnings function in all versions up to, and including, 3.22.0. This makes it possible for unauthenticated attackers to...

CVE-2025-2025

CVE-2025-2025 affects the WordPress plugin GiveWP (Donations) up to version 3.22.0, where a missing capability check in the function give_reports_earnings() allows unauthenticated data disclosure of earnings reports. Connected exploit material demonstrates unauthorized access scenarios and confir...

CVE-2024-47573

creationtimestamp| type| source ---|---|--- 2025-03-14 16:42:22+00:00| seen| https://t.me/cvedetector/20292 2025-03-14 16:46:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qhdnux2x 2025-03-14 18:04:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/1141621035662869...