CVE-2025-1878

creationtimestamp| type| source ---|---|--- 2025-03-03 20:49:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7azahr23 2025-03-03 21:24:39+00:00| seen| https://t.me/cvedetector/19399 2025-03-03 21:46:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/1141006902539272...

CVE-2025-25939

creationtimestamp| type| source ---|---|--- 2025-03-03 20:49:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7alsrr23 2025-03-03 21:24:33+00:00| seen| https://t.me/cvedetector/19395 2025-08-16 01:45:15+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0 2025-08-19...

CVE-2025-23493

creationtimestamp| type| source ---|---|--- 2025-03-03 20:30:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6271 2025-08-18 18:31:00+00:00| seen| MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7...

CVE-2025-27264

creationtimestamp| type| source ---|---|--- 2025-03-03 18:03:48+00:00| seen| https://t.me/cvedetector/19367 2025-08-19 13:26:45+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...

CVE-2024-43169

creationtimestamp| type| source ---|---|--- 2025-03-03 17:49:05+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099758348614556 2025-03-04 19:33:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6401...

CVE-2025-27417 WeGIA Contains a Stored Cross-Site Scripting (XSS) in 'adicionar_status_atendido.php' via the 'status' parameter

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarstatusatendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into...

CVE-2025-26967

creationtimestamp| type| source ---|---|--- 2025-03-03 14:30:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6216 2025-03-03 15:48:54+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285750415310 2026-04-01 21:28:56+00:00| seen|...

CVE-2025-25130

Relative Path Traversal vulnerability in Shah Alom Delete Comments By Status delete-comments-by-status allows Path Traversal.This issue affects Delete Comments By Status: from n/a through = 2.1.1...

CVE-2025-25124

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devu Status Updater fb-status-updater allows Reflected XSS.This issue affects Status Updater: from n/a through = 1.9.2...

CVE-2025-25130 WordPress Delete Comments By Status plugin <= 1.5.3 - Local File Inclusion vulnerability

Relative Path Traversal vulnerability in Shah Alom Delete Comments By Status delete-comments-by-status allows Path Traversal.This issue affects Delete Comments By Status: from n/a through = 2.1.1...

CVE-2025-25130

CVE-2025-25130 corresponds to a Relative Path Traversal that enables unauthenticated PHP Local File Inclusion in the WordPress plugin Delete Comments By Status (affected: Delete Comments By Status, versions

CVE-2025-25130 WordPress Delete Comments By Status plugin <= 1.5.3 - Local File Inclusion vulnerability

Relative Path Traversal vulnerability in NotFound Delete Comments By Status allows PHP Local File Inclusion. This issue affects Delete Comments By Status: from n/a through 2.1.1...

CVE-2025-25124 WordPress Status Updater Plugin <= 9.21 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devu Status Updater allows Reflected XSS. This issue affects Status Updater: from n/a through 1.9.2...

CVE-2025-25124 WordPress Status Updater Plugin <= 9.21 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devu Status Updater fb-status-updater allows Reflected XSS.This issue affects Status Updater: from n/a through = 1.9.2...

CVE-2025-25124

CVE-2025-25124 affects WordPress Status Updater (plugin versions from n/a through 1.9.2). It is a Reflected XSS due to Improper Neutralization of Input During Web Page Generation. CVSS v3.1 base score 7.1 (HIGH) with NETWORK attack vector and user interaction required. Exploitation status is not ...

CVE-2024-43057

creationtimestamp| type| source ---|---|--- 2025-03-03 11:12:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114098199144823059 2025-08-18 13:31:24+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3 2025-08-19 02:47:46+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3...

CVE-2024-43061

creationtimestamp| type| source ---|---|--- 2025-03-03 10:30:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6188 2025-03-03 10:45:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114098092985513084...

CVE-2025-20647

creationtimestamp| type| source ---|---|--- 2025-03-03 03:33:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6140 2025-03-03 04:39:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljh4yl5zcw2a 2025-03-03 05:30:02+00:00| seen|...

CVE-2025-25950

creationtimestamp| type| source ---|---|--- 2025-03-03 01:29:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6125 2025-03-03 02:58:44+00:00| seen| https://t.me/cvedetector/19281 2025-03-06 02:16:33+00:00| seen| Telegram/LnjyeAvwJZTh3Jc9tcYXlfWG8Jfh8HLDR5AhqYK-Ww9g5pT 2025-08-19...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.2.16, which stems from stored cross-site scripting in the adicionarstatusatendido.php endpoint...