438 matches found
CVE-2025-12762
creationtimestamp| type| source ---|---|--- 2025-11-13 15:04:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115542999175905854 2025-11-13 16:09:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5jkgyz7zy2q 2025-11-13 16:30:12+00:00| seen|...
CVE-2025-12621 Flexible Refund and Return Order for WooCommerce <= 1.0.42 - Incorrect Authorization to Authenticated (Contributor+) Refund Status Update
The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on the 'createrefund' function in all versions up to, and including, 1.0.42. This makes it possible for authenticated attackers, wit...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...
CVE-2025-12271
creationtimestamp| type| source ---|---|--- 2025-10-27 13:49:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115446447915141841...
CVE-2025-11564 Tutor LMS – eLearning and online course solution <= 3.8.3 - Missing Authorization to Unauthenticated Payment Status Update
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check while verifying webhook signatures on the "verifyAndCreateOrderData" function in all versions up to, and including, 3.8.3. This makes it...
CVE-2025-60339
creationtimestamp| type| source ---|---|--- 2025-10-22 17:40:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115419042998845715 2025-10-22 21:23:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3srrmtsu323...
CVE-2025-11411
creationtimestamp| type| source ---|---|--- 2025-10-22 10:41:55+00:00| seen| https://social.nlnetlabs.nl/users/nlnetlabs/statuses/115417395423431007 2025-10-22 15:53:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418621881685262 2025-10-22 18:48:07+00:00| seen|...
CVE-2025-8051
creationtimestamp| type| source ---|---|--- 2025-10-20 20:38:54+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115408419667958692 2025-10-20 22:46:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nvgmtjsh2m...
CVE-2025-11728 Oceanpayment CreditCard Gateway <= 6.0 - Missing Authentication to Unauthenticated Order Status Update
The Oceanpayment CreditCard Gateway plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'returnpayment' and 'noticepayment' functions in all versions up to, and including, 6.0. This makes it possibl...
CVE-2025-11728
CVE-2025-11728 affects the Oceanpayment CreditCard Gateway plugin for WordPress (versions up to 6.0). The root cause is missing authentication and capability checks in the return_payment and notice_payment functions, allowing unauthenticated and unauthorized modification of data. The practical im...
GHSA-WR9H-G72X-MWHM
creationtimestamp| type| source ---|---|--- 2025-10-07 14:19:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115333317985711431...
CVE-2025-3718
creationtimestamp| type| source ---|---|--- 2025-10-07 13:48:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115333195472561898...
EUVD-2012-6547
Malware in sbrugna...
EUVD-2022-52326
Malicious code in bioql PyPI...
EUVD-2024-49779
Malicious code in bioql PyPI...
CVE-2025-9983
creationtimestamp| type| source ---|---|--- 2025-09-22 14:10:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115248349124892707 2025-09-22 15:26:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzgpsapzwh2f 2025-10-25 20:22:36+00:00| seen|...
CVE-2025-7221 GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the giveupdatepaymentstatus function in all versions up to, and including, 4.5.0. This makes it possible for authenticated attackers,...
PT-2025-34188
Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions prior to 4.5.1 Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is susceptible to unauthorized data modification. This is due to the absence of ...
CVE-2025-8152 WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons <= 1.7.0 - Missing Authorization to Unauthenticated Sticky Status Update
The WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'updatectastatus' and 'changestickysidebarname' functions in all versions up to, and including, 1.7.0. This makes it...