CVE-2025-9526

creationtimestamp| type| source ---|---|--- 2025-08-27 13:09:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115100886714680020...

CVE-2025-29524

creationtimestamp| type| source ---|---|--- 2025-08-25 14:40:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115089922710164590...

CVE-2025-7221

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the giveupdatepaymentstatus function in all versions up to, and including, 4.5.0. This makes it possible for authenticated attackers,...

CVE-2025-7221 GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the giveupdatepaymentstatus function in all versions up to, and including, 4.5.0. This makes it possible for authenticated attackers,...

GHSA-HQR4-4GFC-5P2J

creationtimestamp| type| source ---|---|--- 2025-08-19 18:39:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115056886214495468...

CVE-2025-4690

creationtimestamp| type| source ---|---|--- 2025-08-19 13:33:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115055684227363955...

CVE-2025-29617

creationtimestamp| type| source ---|---|--- 2025-08-19 03:03:09+00:00| seen| https://schleuss.online/users/vulnbot/statuses/115053205038349468 2025-08-19 05:07:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwq5f7mo4t2b 2025-08-19 23:56:35+00:00| seen|...

CVE-2025-8980

creationtimestamp| type| source ---|---|--- 2025-08-14 19:46:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115028839246355071 2025-08-15 01:31:57+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwfph3uxjy2n...

GHSA-PRJ3-CCX8-P6X4

creationtimestamp| type| source ---|---|--- 2025-08-13 14:34:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115021950530102944...

CVE-2025-8297

creationtimestamp| type| source ---|---|--- 2025-08-12 14:47:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115016338592740347 2025-08-20 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-857/...

CVE-2025-41675

creationtimestamp| type| source ---|---|--- 2025-07-21 10:42:09+00:00| seen| https://infosec.exchange/users/certvde/statuses/114890803062994673 2025-07-21 10:42:29+00:00| seen| https://infosec.exchange/users/certvde/statuses/114890804388115598 2025-07-21 10:46:28+00:00| seen|...

Axis Communications Discontinued Devices Detection

The current plugin identifies Axis devices that are currently discontinued. Axis Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last time buys. Product generally orderable until the...

CVE-2023-47298

An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses...

Siemens Active Devices Detection

The current plugin identifies Siemens devices that are still under active support. Siemens Lifecycle Statuses: - 'PM300:Active Product': Most current offering within a product category. - 'PM400:Announcement of product phase-out': Product in phase-out, support and orders still possible. -...

Siemens Discontinued Devices Detection

The current plugin identifies Siemens devices that are currently discontinued. Siemens Lifecycle Statuses: - 'PM300:Active Product': Most current offering within a product category. - 'PM400:Announcement of product phase-out': Product in phase-out, support and orders still possible. -...

Siemens End-of-Life Devices Detection

The current plugin identifies Siemens devices that are end-of-life, i.e., still supported but have a discontinued date announced. Siemens Lifecycle Statuses: - 'PM300:Active Product': Most current offering within a product category. - 'PM400:Announcement of product phase-out': Product in phase-ou...

GHSA-W6Q7-J642-7C25

creationtimestamp| type| source ---|---|--- 2025-05-30 18:15:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114598146975884055 2025-05-30 18:16:52+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lqftpll67w22...

CVE-2024-32524

Missing Authorization vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Custom Order Statuses for WooCommerce: from n/a through 1.5.2...

CVE-2024-25930

Cross-Site Request Forgery CSRF vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Custom Order Statuses for WooCommerce: from n/a through 1.5.2...

CVE-2024-12712

The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the webhook function in all versions up to, and including, 5.7.8. This makes it possible for unauthenticated attackers to modify order statuses...