CVE-2025-64634

creationtimestamp| type| source ---|---|--- 2025-12-16 09:45:58+00:00| seen| https://gist.github.com/Darkcrai86/d93246a331d70cbcd62e5786a5f3997a 2026-01-12 20:07:23+00:00| seen| Telegram/8sAp-VzdCpmBtZpXHcIlhxzqtmWknERFSKz0UU7al4qy2OU...

CVE-2025-14032

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-67727

creationtimestamp| type| source ---|---|--- 2025-12-12 07:32:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7rl3qjufj2q 2025-12-12 08:10:38+00:00| seen| https://gist.github.com/Darkcrai86/336c80a608d1c680c71671df6cccc755...

EUVD-2025-202986

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-14032

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-14032

CVE-2025-14032 affects Bold Timeline Lite (WordPress) up to version 1.2.7, exposing a Stored Cross‑Site Scripting (Stored XSS) via the title parameter in the bold_timeline_group shortcode. The issue stems from insufficient input sanitization and output escaping, enabling authenticated attackers w...

CVE-2025-14032 Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-14032 Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

WordPress plugin Bold Timeline Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

PT-2025-50844

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'bold timeline group' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

CVE-2025-13296

creationtimestamp| type| source ---|---|--- 2025-12-01 15:09:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6wpignm3w2s...

Attackers Actively Exploiting Critical Vulnerability in Post SMTP Plugin

On October 11th, 2025, we received a submission for an Account Takeover via Email Log Disclosure vulnerability in Post SMTP, a WordPress plugin with more than 400,000 active installations. This vulnerability makes it possible for an unauthenticated attacker to view email logs, including password...

CVE-2025-40198

creationtimestamp| type| source ---|---|--- 2025-11-12 23:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5htsunc442x 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2006-4837

creationtimestamp| type| source ---|---|--- 2025-11-11 21:02:33+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m5ezvpgxed2f...

CVE-2025-41103

creationtimestamp| type| source ---|---|--- 2025-11-11 13:37:11+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eaxaroit32...

CVE-2025-12926

creationtimestamp| type| source ---|---|--- 2025-11-10 04:11:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5aqwliv5h2s...

CVE-2025-64328

creationtimestamp| type| source ---|---|--- 2025-11-07 06:07:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4zfzlrdcj2s 2025-11-07 17:40:36+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52mqddqswf2 2025-11-09 00:29:20+00:00| seen|...

CVE-2022-50593

creationtimestamp| type| source ---|---|--- 2025-11-06 21:40:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4yjplah4a2b...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/i915/gt: Fixed an issue where the timeline was held on the VMA allocation error. The following errors have been sporadically reported by CI when a test unbinds the i915 driver on a ring submission platform: 239.330153...

CVE-2025-12060

creationtimestamp| type| source ---|---|--- 2025-10-30 17:25:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115464283881976620 2025-10-30 17:52:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gjofrtij2k 2025-12-02 00:04:24+00:00| published-proof-of-concept|...