CVE-2025-1766 Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'paymentcomplete' function in all versions up to, and including, 4.0.24. This makes it possible for unauthenticated...

Aim 资源管理错误漏洞

Aim is an easy-to-use and high-performance open source experiment tracker from Aim Open Source USA. Aim version 3.23.0 suffers from a Resource Management Error vulnerability that stems from a ScheduledStatusReporter object that could cause the main thread to block, which could result in a denial ...

PT-2025-12026

Name of the Vulnerable Software and Affected Versions aimhubio/aim version 3.23.0 Description The ScheduledStatusReporter object can be instantiated to run on the main thread of the tracking server, leading to the main thread being blocked indefinitely. This results in a denial of service as the...

PT-2025-12004 · WordPress · Eventin

Name of the Vulnerable Software and Affected Versions: Eventin plugin for WordPress versions up to, and including, 4.0.24 Description: The issue allows unauthorized modification of data due to a missing capability check on the payment complete function. This makes it possible for unauthenticated...

CVE-2025-27780

creationtimestamp| type| source ---|---|--- 2025-03-19 22:01:14+00:00| published-proof-of-concept| Telegram/jlMT5pQePgK5GBSq5wMoupEVU9UT7ofYY1WgfO6aSFHSaLY 2025-03-19 23:00:34+00:00| seen| https://t.me/cvedetector/20681 2025-03-20 00:49:02+00:00| seen|...

WordPress Eventin plugin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update vulnerability

Missing Authorization to Unauthenticated Payment Status Update vulnerability discovered by wesley wcraft in WordPress Plugin Eventin versions = 4.0.24...

CVE-2025-30197

creationtimestamp| type| source ---|---|--- 2025-03-19 18:43:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqtnc2kyp2n 2025-03-19 18:49:14+00:00| seen| https://t.me/cvedetector/20640 2025-03-21 14:19:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8334 2025-08-12...

Unexpected Status Code or Return Value

Overview Affected versions of this package are vulnerable to Unexpected Status Code or Return Value in initConn, which causes out of order responses when CLIENT SETINFO times out while establishing a connection. Workaround This vulnerability can be avoided by setting DisableIndentity to true when...

CVE-2025-29930

creationtimestamp| type| source ---|---|--- 2025-03-18 21:55:34+00:00| seen| https://t.me/cvedetector/20601 2025-08-12 13:33:27+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996 2025-08-21 03:19:26+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996...

CVE-2025-26138

creationtimestamp| type| source ---|---|--- 2025-03-18 20:15:01+00:00| seen| https://t.me/cvedetector/20590 2025-03-18 20:18:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihyrudw2j...

CVE-2025-21619

creationtimestamp| type| source ---|---|--- 2025-03-18 19:42:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114185140719428080 2025-03-18 20:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihzndug2k 2025-03-18 21:55:43+00:00| seen| https://t.me/cvedetector/206...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the indexonUpdateStatus function in Orders.php, which does not check for the permissions of the user before modifying an order. Remediation Upgrade tastyigniter/tastyigniter to version 4.0.0-beta.1 or higher...

CVE-2025-2494

creationtimestamp| type| source ---|---|--- 2025-03-18 11:55:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7901 2025-03-18 13:01:22+00:00| seen| Telegram/6cbUuW0XOy9-5cfzVYZy-1D70VP0VBBmnHLM6kTk1XKO28 2025-03-18 16:03:50+00:00| seen| https://t.me/cvedetector/20565 2025-03-18 16:13:23+00:0...

CVE-2025-25220

creationtimestamp| type| source ---|---|--- 2025-03-18 08:57:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7896 2025-03-18 09:48:26+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114182802995800818 2025-03-18 11:53:22+00:00| seen| https://t.me/cvedetector/20557 2025-03-...

CVE-2024-540385

creationtimestamp| type| source ---|---|--- 2025-03-18 07:57:48+00:00| seen| https://bsky.app/profile/andranglin.bsky.social/post/3lkn73e2qys2y 2025-03-19 03:27:06+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lkpagarcoc2e...

CVE-2025-29910

creationtimestamp| type| source ---|---|--- 2025-03-18 00:23:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114180582366575557 2025-08-12 13:33:28+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996 2025-08-21 03:19:30+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996...

TastyIgniter 安全漏洞

TastyIgniter is an online ordering software from TastyIgniter open source. A security vulnerability exists in TastyIgniter version 3.7.6, which stems from improper access control of the indexonUpdateStatus function in the Orders Management System, which could result in an unauthorized user updati...

CVE-2025-25914

creationtimestamp| type| source ---|---|--- 2025-03-17 19:47:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7837 2025-03-17 23:20:00+00:00| seen| https://t.me/cvedetector/20523 2025-03-18 00:01:10+00:00| seen|...

CVE-2024-48831

creationtimestamp| type| source ---|---|--- 2025-03-17 18:38:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114179224013214264 2025-03-17 19:05:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkltwzdqin26 2025-03-17 19:48:21+00:00| seen|...

CVE-2025-0599

creationtimestamp| type| source ---|---|--- 2025-03-17 14:52:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7785 2025-03-17 15:48:57+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114178558308864025 2025-03-17 17:00:45+00:00| seen|...