CVE-2025-49957 WordPress Email Attachment by Order Status & Products Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weboccult Technologies Pvt Ltd Email Attachment by Order Status & Products email-attachment-by-order-status-products allows Reflected XSS.This issue affects Email Attachment by Order Status &...

CVE-2025-49957 WordPress Email Attachment by Order Status & Products Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weboccult Technologies Pvt Ltd Email Attachment by Order Status & Products email-attachment-by-order-status-products allows Reflected XSS.This issue affects Email Attachment by Order Status &...

CVE-2025-62771

creationtimestamp| type| source ---|---|--- 2025-10-22 14:00:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418179313652784...

CVE-2025-62772

creationtimestamp| type| source ---|---|--- 2025-10-22 14:00:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418179313652784...

CVE-2025-40778

creationtimestamp| type| source ---|---|--- 2025-10-22 13:56:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/68 2025-10-22 15:58:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418643498336537 2025-10-22 16:10:12+00:00| seen|...

CVE-2025-11411

creationtimestamp| type| source ---|---|--- 2025-10-22 10:41:55+00:00| seen| https://social.nlnetlabs.nl/users/nlnetlabs/statuses/115417395423431007 2025-10-22 15:53:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418621881685262 2025-10-22 18:48:07+00:00| seen|...

CVE-2025-12033

creationtimestamp| type| source ---|---|--- 2025-10-22 07:43:31+00:00| seen| Telegram/ukV8RabafTGa2PME5ickPQ1ceLmQA3C2PIKtTctNgjPk...

PT-2025-43218

Name of the Vulnerable Software and Affected Versions Email Attachment by Order Status & Products versions n/a through 1.0.1 Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting XSS. This issue...

WordPress plugin email-attachment-by-order-status-products 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-53042

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...

CVE-2025-53054

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2025-52079

creationtimestamp| type| source ---|---|--- 2025-10-21 19:42:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115413862186897967...

CVE-2025-11625

creationtimestamp| type| source ---|---|--- 2025-10-21 13:48:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115412468776783222 2025-10-21 16:10:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3ppsvxgm622...

CVE-2025-5496

creationtimestamp| type| source ---|---|--- 2025-10-21 10:47:26+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115411756361784994 2025-10-21 13:13:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3pfwaieoq2u...

CVE-2025-7330

creationtimestamp| type| source ---|---|--- 2025-10-21 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-294-01...

CVE-2025-62679

creationtimestamp| type| source ---|---|--- 2025-10-21 04:54:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3ojzdkptk22...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987695 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in estreesearch Hulk Robot reported a BUGON:...

CVE-2025-61301

creationtimestamp| type| source ---|---|--- 2025-10-20 21:00:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115408506440457376 2025-10-21 01:20:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3o62rkrt22h...

CVE-2025-8051

creationtimestamp| type| source ---|---|--- 2025-10-20 20:38:54+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115408419667958692 2025-10-20 22:46:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nvgmtjsh2m...

CVE-2025-8049

creationtimestamp| type| source ---|---|--- 2025-10-20 20:38:53+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115408419667508056 2025-10-20 22:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nvocph6y2i...