28 matches found
blackash-cve-2025-6389
🔥 CVE-2025-6389 — WordPress Zero-Day Critico RCE wpvultheme 🧩 Cos'è? CVE-2025-6389 è una vulnerabilità Critica CVSS 9.8 nel plugin WordPress Sneeit Framework ≤ 8.3, ampiamente utilizzato da temi popolari. Consente esecuzione remota di codice non autenticata — la classe più pericolosa di...
SneeitScanner-CVE-2025-6389
SneeitScanner-CVE-2025-6389 SneeitScanner - PoC & Scanner per RCE non autenticata su Sneeit Framework CVE-2025-6389 ⚡ SneeitScanner ⚡ Prova di Concetto PoC e Scanner Automatizzato per RCE Non Autenticata su Sneeit Framework CVE-2025-6389 Questo script Python robusto è una PoC funzionale e uno...
Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_func
The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...
CVE-2025-6389
CVE-2025-6389 Sneeit Framework , | | | \ / | | / /| || / / | | | | | / / | / || |||/|/ // / //...
The vulnerability of the sneeit_articles_pagination_callback() function in the Sneeit Framework, a content management system for WordPress, allows a hacker to execute arbitrary code.
The vulnerability of the sneeitarticlespaginationcallback function in the Sneeit Framework, a content management system for WordPress, is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Exploit for CVE-2025-6389
CVE-2025-6389 Sneeit Framework = 8.3 - Unauthenticated Rem...
Exploit for CVE-2025-6389
SneeitScanner-CVE-2025-6389 SneeitScanner - PoC & Scanner...
WordPress Plugin 'Sneeit Framework' < 8.4 Code Execution
The WordPress application running on the remote host has a version of the 'Sneeit Framework' plugin that is prior to 8.4 and, thus, is affected by a code execution vulnerability. The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including,...
Sneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost Botnet Attacks
A critical security flaw in the Sneeit Framework plugin for WordPress is being actively exploited in the wild, per data from Wordfence. The remote code execution vulnerability in question is CVE-2025-6389 CVSS score: 9.8, which affects all versions of the plugin prior to and including 8.3. It has...
Sneeit Framework Plugin for WordPress < 8.4 Remote Code Execution
The WordPress Sneeit Framework Plugin installed on the remote host is affected by a Remote Code Execution vulnerability due to insufficient input validation in the sneeitarticlespaginationcallback function, which accepts user input and passes it through the calluserfunc function. This allows...
Attackers Actively Exploiting Critical Vulnerability in Sneeit Framework Plugin
On June 10th, 2025, we received a submission for a Remote Code Execution vulnerability in Sneeit Framework, a WordPress plugin with an estimated 1,700 active installations. The plugin is bundled in multiple premium themes. This vulnerability can be leveraged to execute code remotely. The vendor...
WordPress Sneeit Framework plugin <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback vulnerability
Unauthenticated Remote Code Execution in sneeitarticlespaginationcallback vulnerability discovered by Tonn in WordPress Plugin Sneeit Framework versions = 8.3...
CVE-2025-6389
The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...
CVE-2025-6389
The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...
CVE-2025-6389 Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback
The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...
EUVD-2025-199531
The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...
CVE-2025-6389
The CVE-2025-6389 issue affects the WordPress Sneeit Framework plugin (versions
CVE-2025-6389 Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback
The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...
WordPress plugin Sneeit Framework 代码注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code injection...
VulnCheck KEV: CVE-2025-6389
The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...