WordPress Eventin plugin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update vulnerability

Missing Authorization to Unauthenticated Payment Status Update vulnerability discovered by wesley wcraft in WordPress Plugin Eventin versions = 4.0.24...

CVE-2025-30197

creationtimestamp| type| source ---|---|--- 2025-03-19 18:43:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqtnc2kyp2n 2025-03-19 18:49:14+00:00| seen| https://t.me/cvedetector/20640 2025-03-21 14:19:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8334 2025-08-12...

Unexpected Status Code or Return Value

Overview Affected versions of this package are vulnerable to Unexpected Status Code or Return Value in initConn, which causes out of order responses when CLIENT SETINFO times out while establishing a connection. Workaround This vulnerability can be avoided by setting DisableIndentity to true when...

CVE-2025-29930

creationtimestamp| type| source ---|---|--- 2025-03-18 21:55:34+00:00| seen| https://t.me/cvedetector/20601 2025-08-12 13:33:27+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996 2025-08-21 03:19:26+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996...

CVE-2025-26138

creationtimestamp| type| source ---|---|--- 2025-03-18 20:15:01+00:00| seen| https://t.me/cvedetector/20590 2025-03-18 20:18:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihyrudw2j...

CVE-2025-21619

creationtimestamp| type| source ---|---|--- 2025-03-18 19:42:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114185140719428080 2025-03-18 20:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihzndug2k 2025-03-18 21:55:43+00:00| seen| https://t.me/cvedetector/206...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the indexonUpdateStatus function in Orders.php, which does not check for the permissions of the user before modifying an order. Remediation Upgrade tastyigniter/tastyigniter to version 4.0.0-beta.1 or higher...

CVE-2025-2494

creationtimestamp| type| source ---|---|--- 2025-03-18 11:55:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7901 2025-03-18 13:01:22+00:00| seen| Telegram/6cbUuW0XOy9-5cfzVYZy-1D70VP0VBBmnHLM6kTk1XKO28 2025-03-18 16:03:50+00:00| seen| https://t.me/cvedetector/20565 2025-03-18 16:13:23+00:0...

CVE-2025-25220

creationtimestamp| type| source ---|---|--- 2025-03-18 08:57:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7896 2025-03-18 09:48:26+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114182802995800818 2025-03-18 11:53:22+00:00| seen| https://t.me/cvedetector/20557 2025-03-...

CVE-2024-540385

creationtimestamp| type| source ---|---|--- 2025-03-18 07:57:48+00:00| seen| https://bsky.app/profile/andranglin.bsky.social/post/3lkn73e2qys2y 2025-03-19 03:27:06+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lkpagarcoc2e...

CVE-2025-29910

creationtimestamp| type| source ---|---|--- 2025-03-18 00:23:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114180582366575557 2025-08-12 13:33:28+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996 2025-08-21 03:19:30+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996...

PT-2025-11609

Name of the Vulnerable Software and Affected Versions TastyIgniter version 3.7.6 Description The issue is related to an Incorrect Access Control flaw in the Orders Management System, allowing unauthorized users to update order statuses. This occurs due to a failure in verifying user permissions...

TastyIgniter security vulnerability

TastyIgniter is an online ordering software from TastyIgniter open source. A security vulnerability exists in TastyIgniter version 3.7.6, which stems from improper access control of the indexonUpdateStatus function in the Orders Management System, which could result in an unauthorized user updati...

CVE-2025-25914

creationtimestamp| type| source ---|---|--- 2025-03-17 19:47:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7837 2025-03-17 23:20:00+00:00| seen| https://t.me/cvedetector/20523 2025-03-18 00:01:10+00:00| seen|...

CVE-2024-48831

creationtimestamp| type| source ---|---|--- 2025-03-17 18:38:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114179224013214264 2025-03-17 19:05:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkltwzdqin26 2025-03-17 19:48:21+00:00| seen|...

thunderbird: Crafted email message incorrectly shown as being encrypted

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted...

CVE-2025-0599

creationtimestamp| type| source ---|---|--- 2025-03-17 14:52:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7785 2025-03-17 15:48:57+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114178558308864025 2025-03-17 17:00:45+00:00| seen|...

CVE-2025-2376

creationtimestamp| type| source ---|---|--- 2025-03-17 12:47:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7760 2025-03-17 13:13:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114177945268984862 2025-03-17 14:00:26+00:00| published-proof-of-concept|...

CVE-2025-2396

creationtimestamp| type| source ---|---|--- 2025-03-17 07:48:29+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114176669025636925 2025-03-17 08:00:53+00:00| seen| Telegram/q1CDtHQhektK3nhn8ZC9Wm2qKNcq5HBzhGFEOdcD8VflUo 2025-03-17 09:01:18+00:00| seen|...

DEBIAN-CVE-2023-52927

In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nfctfindexpectation Currently nfconntrackin calling nfctfindexpectation will remove the exp from the hash table. However, in some scenario, we expect the exp not to be removed when the...