27237 matches found
WordPress plugin Bookme – Free Online Appointment Booking and Scheduling: SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... WordPress plugin...
WordPress Bookme plugin <= 4.2 - Authenticated (Admin+) SQL Injection via 'filter[status]' Parameter vulnerability
Authenticated Admin+ SQL Injection via 'filterstatus' Parameter vulnerability discovered by Sopon Tangpathum SoNaJaa - freelance in WordPress Plugin Bookme – Free Online Appointment Booking and Scheduling Plugin versions = 4.2...
CVE-2023-25126
creationtimestamp| type| source ---|---|--- 2025-11-24 20:51:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115606648928371460...
CVE-2025-13609
creationtimestamp| type| source ---|---|--- 2025-11-24 19:04:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115606230640518994 2025-11-24 21:27:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6fre5w4k42w 2025-11-25 03:52:17+00:00| seen|...
EUVD-2025-198890
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in setmeshsync and setmeshcomplete There is a BUG: KASAN: stack-out-of-bounds in setmeshsync due to memcpy from badly declared on-stack flexible array. Another crash is in setmeshcomplete due to double...
CVE-2025-60915
creationtimestamp| type| source ---|---|--- 2025-11-24 17:47:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ff3rsyth26...
CVE-2025-40213 Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in setmeshsync and setmeshcomplete There is a BUG: KASAN: stack-out-of-bounds in setmeshsync due to memcpy from badly declared on-stack flexible array. Another crash is in setmeshcomplete due to double...
CVE-2025-44018
creationtimestamp| type| source ---|---|--- 2025-11-24 15:30:04+00:00| seen| https://infosec.place/objects/3df11b65-0b0e-437a-809e-d71455fdcce2 2025-11-24 15:46:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115605449877366856 2025-11-24 17:18:57+00:00| seen|...
ECHO-820C-CCBE-62EB
Bulletin has no description...
CVE-2025-56396
creationtimestamp| type| source ---|---|--- 2025-11-24 07:27:01+00:00| seen| https://gist.github.com/Han-tj/22cfd18fa9f116bb886e8e56782f6865...
CVE-2025-12800
creationtimestamp| type| source ---|---|--- 2025-11-24 01:50:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6dplwp7g72n...
CVE-2025-13384
The CP Contact Form with PayPal plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.3.56. This is due to the plugin exposing an unauthenticated IPN-like endpoint via the 'cpcontactformppipncheck' query parameter that processes payment confirmations...
EUVD-2025-198559
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2025-198561
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
PT-2025-47893
CVE-2025-12561 - CVE-2022-1234: Oracle WebLogic Server Remote Code Execution CVE ID : CVE-2025-12561 Published : Nov. 22, 2025, 11:15 p.m. | 3 hours, 26 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit t...
CVE-2025-13384
The WordPress plugin CP Contact Form with PayPal (
EUVD-2025-198526
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
GHSA-HWM7-W97P-4H8P
creationtimestamp| type| source ---|---|--- 2025-11-21 22:32:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115590060817850699...