29510 matches found
WordPress plugin The Events Calendar 安全漏洞
WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2026-1480
Name of the Vulnerable Software and Affected Versions StellarWP The Events Calendar versions through 6.15.12.2 Description A missing authorization issue exists in StellarWP The Events Calendar, allowing exploitation of incorrectly configured access control security levels. Recommendations Update...
FoolishScan
Foolish Scan v2.3 Gold Master Context-Aware CTF & Lab Re...
FoolishScan-
Foolish Scan v2.3 Gold Master Context-Aware CTF & Lab Re...
CVE-2025-15026
creationtimestamp| type| source ---|---|--- 2026-01-05 16:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbosoph6zz2m 2026-01-05 16:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbospettl72a 2026-01-05 16:05:40+00:00| seen|...
CVE-2024-23511
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows DOM-Based XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 5.3.3...
CVE-2024-23511 WordPress The Plus Addons for Elementor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows DOM-Based XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 5.3.3...
PT-2026-1214
Name of the Vulnerable Software and Affected Versions The Team WordPress plugin versions prior to 5.0.11 Description The Team WordPress plugin does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action. This allows unauthenticated users to potentially...
CVE-2025-67160
creationtimestamp| type| source ---|---|--- 2026-01-01 15:00:08+00:00| published-proof-of-concept| Telegram/fo9HSyervRu8zmZqDISxrEVJ89qXzcJOGMtymBsqB2XNIxc 2026-01-02 18:55:13+00:00| published-proof-of-concept| Telegram/0JnnPb1FXPACs6svVySu41rA7pedi-lhGwy4Q4xBeRTLA 2026-01-06 18:40:45+00:00| seen...
WordPress Double the Donation plugin <= 3.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability
Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by WordFence in WordPress Plugin Double the Donation versions = 3.0.0...
WordPress The Wound theme <= 0.0.1 - Unauthenticated LFI vulnerability
Unauthenticated LFI vulnerability discovered by Aly Khaled in WordPress Theme The Wound versions = 0.0.1...
The Shit 安全漏洞
The Shit is a command line utility from the individual developers of AsfhtgkDavid for automatically detecting and fixing common errors in shell commands. A security vulnerability exists in versions of The Shit prior to 0.1.1 that stems from failure to verify ownership of configuration files and...
MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know
Detect and mitigate CVE-2025-14847, an unauthenticated information leak vulnerability in MongoDB. Exploitation has been observed in the wild. Organizations should patch urgently...
CVE-2025-66203
creationtimestamp| type| source ---|---|--- 2025-12-27 00:05:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/115788606687747874 2025-12-27 00:05:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mawj4af7kz2f 2025-12-27 00:44:21+00:00| seen|...
China-Linked Evasive Panda Ran DNS Poisoning Campaign to Deliver MgBot Malware
A China-linked advanced persistent threat APT group has been attributed to a highly-targeted cyber espionage campaign in which the adversary poisoned Domain Name System DNS requests to deliver its signature MgBot backdoor in attacks targeting victims in Türkiye, China, and India. The activity,...
CVE-2025-15090
creationtimestamp| type| source ---|---|--- 2025-12-25 23:26:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3matwhvvvt72b 2025-12-25 23:28:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3matwkiusb42u 2025-12-26 01:02:07+00:00| seen|...
CVE-2025-68568
Missing Authorization vulnerability in Claspo Popup Builders Claspo – Popups, Spin the Wheel & Email Capture claspo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Claspo – Popups, Spin the Wheel & Email Capture: from n/a through = 1.0.7...
Securing Cross-Domain Internet of Drones: An RFF-PUF Allied Authenticated Key Exchange Protocol with Over-The-Air Enrollment
The Internet of Drones IoD is an emerging and crucial paradigm enabling advanced applications that require seamless, secure communication across heterogeneous and untrusted domains. In such environments, access control and the transmission of sensitive data pose significant security challenges fo...
CVE-2025-8769
creationtimestamp| type| source ---|---|--- 2025-12-24 21:46:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maragn7soj2z 2025-12-24 22:42:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mardjqwdvt2q 2025-12-25 00:06:44+00:00| seen|...