WordPress plugin Sky Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-50867

creationtimestamp| type| source ---|---|--- 2025-07-26 21:00:04+00:00| published-proof-of-concept| Telegram/wjhbCWP6S6MT1dR4loC7XHcYLFuNifCaXxewWhJr2ZOKhYQ 2025-07-28 21:00:05+00:00| published-proof-of-concept| Telegram/yClP7ID2sv33ZU8LKP82OuDHMHI-3r8bUmurim2SHQMJTmY 2025-07-31 19:57:13+00:00|...

CVE-2025-43487

creationtimestamp| type| source ---|---|--- 2025-07-23 04:27:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lum6jfvuhr2i...

CVE-2025-7371

creationtimestamp| type| source ---|---|--- 2025-07-22 17:33:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukzyo55vo2i...

CVE-2025-7865

creationtimestamp| type| source ---|---|--- 2025-07-20 07:06:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luevzeg7lh2w...

CVE-2025-29572

creationtimestamp| type| source ---|---|--- 2025-07-18 08:45:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lua2nj4l2w2j...

CVE-2025-43019

creationtimestamp| type| source ---|---|--- 2025-07-08 17:28:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltht6jjsrg2b...

CVE-2025-20694

creationtimestamp| type| source ---|---|--- 2025-07-08 06:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgp7vgckv2w 2025-07-22 14:06:20+00:00| seen| https://poliverso.org/objects/0477a01e-869bf7e6-88fe2dad16b5c810...

CVE-2025-40736

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-574/ 2025-07-08 14:16:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthihzark62w 2025-07-09 18:14:09+00:00| seen| https://t.me/icscert/1228 2025-07-10...

CVE-2025-7140

creationtimestamp| type| source ---|---|--- 2025-07-07 23:29:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltfwv767762s...

CVE-2025-38157

creationtimestamp| type| source ---|---|--- 2025-07-03 11:16:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2m2z73bp2o...

CVE-2025-53001

creationtimestamp| type| source ---|---|--- 2025-06-30 17:12:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstoko54e32v...

CVE-2025-6911

creationtimestamp| type| source ---|---|--- 2025-06-30 15:06:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19933 2025-06-30 17:26:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstpeakbg52i...

MAL-2025-5526 Malicious code in veynlinh-sky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb6b2d752cc5210fe846e1420ea6448235027e9ba0b87b2380cb75b85aa66f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in veynlinh-sky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb6b2d752cc5210fe846e1420ea6448235027e9ba0b87b2380cb75b85aa66f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-6761

A vulnerability was found in Kingdee Cloud-Starry-Sky Enterprise Edition 6.x/7.x/8.x/9.0. It has been rated as critical. Affected by this issue is the function plugin.buildMobilePopHtml of the file \k3\o2o\bos\webapp\action\DynamicForm 4 Action.class of the component Freemarker Engine. The...

CVE-2025-6761

A vulnerability was found in Kingdee Cloud-Starry-Sky Enterprise Edition 6.x/7.x/8.x/9.0. It has been rated as critical. Affected by this issue is the function plugin.buildMobilePopHtml of the file \k3\o2o\bos\webapp\action\DynamicForm 4 Action.class of the component Freemarker Engine. The...

CVE-2025-5306

creationtimestamp| type| source ---|---|--- 2025-06-27 10:47:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lslhns65va25 2025-07-06 21:00:32+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3ltd64bvef22u 2025-07-17 10:06:42+00:00| seen|...

CVE-2025-6761 Kingdee Cloud-Starry-Sky Enterprise Edition Freemarker Engine DynamicForm 4 Action.class plugin.buildMobilePopHtml special elements used in a template engine

A vulnerability was found in Kingdee Cloud-Starry-Sky Enterprise Edition 6.x/7.x/8.x/9.0. It has been rated as critical. Affected by this issue is the function plugin.buildMobilePopHtml of the file \k3\o2o\bos\webapp\action\DynamicForm 4 Action.class of the component Freemarker Engine. The...

CVE-2025-6761

CVE-2025-6761 affects Kingdee Cloud-Starry-Sky Enterprise Edition (versions 6.x–9.0). The root cause is improper neutralization of special elements in the Freemarker Engine template processing, specifically in the function plugin.buildMobilePopHtml inside DynamicForm 4 Action.class. This can enab...