CVE-2025-12391 Restrictions for BuddyPress <= 1.5.2 - Missing Authorization to Unauthenticated Tracking Status Update

The Restrictions for BuddyPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handleoptinoptout function in all versions up to, and including, 1.5.2. This makes it possible for unauthenticated attackers to opt in and out of tracki...

WordPress Cryptocurrency Payment Gateway for WooCommerce plugin <= 2.0.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Cryptocurrency Payment Gateway for WooCommerce versions = 2.0.25...

CVE-2024-13352

creationtimestamp| type| source ---|---|--- 2025-02-07 06:12:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113961122645272686 2025-02-07 06:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkxavpowy26 2025-02-07 07:57:37+00:00| seen|...

CVE-2024-13521

creationtimestamp| type| source ---|---|--- 2025-01-28 07:27:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113904796362962773 2025-01-28 08:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrzatxbew2c 2025-01-28 09:16:58+00:00| seen|...

CVE-2024-11327

creationtimestamp| type| source ---|---|--- 2025-01-11 02:43:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113807419136532964 2025-01-11 03:04:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1260 2025-01-11 03:15:52+00:00| seen|...

CVE-2024-50807

creationtimestamp| type| source ---|---|--- 2025-01-10 16:04:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113804905401091069 2025-01-10 16:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfflonwihj22 2025-01-10 18:00:56+00:00| seen|...

CVE-2025-0333

creationtimestamp| type| source ---|---|--- 2025-01-09 05:01:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113796638129849777 2025-01-09 05:14:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/887 2025-01-09 05:15:40+00:00| seen|...

CVE-2024-12699

creationtimestamp| type| source ---|---|--- 2025-01-07 09:31:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113786373333021847 2025-01-07 09:36:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/383 2025-01-07 10:15:34+00:00| seen|...

CVE-2024-56200

creationtimestamp| type| source ---|---|--- 2024-12-19 18:44:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113680964695610869 2024-12-19 19:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldolhrnaxv2a 2024-12-19 20:40:32+00:00| seen|...

CVE-2024-49142

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 22:07:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113630803588655999 2025-01-14 21:50:00+00:00| seen|...

CVE-2019-10149

creationtimestamp| type| source ---|---|--- 2019-06-06 17:46:00+00:00| published-proof-of-concept| https://t.me/antichat/5295 2019-06-10 12:11:05+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/exim-sahkopostipalvelimen-haavoittuvuuden-avulla-tehdaan-tietomurtoja 2019-06-13 05:00:00+00:00|...