Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:11 +0200 *************** ✏️Title: CVE-2025-30945 | Taskbuilder Plugin up to 4.0.3 on WordPress authorization (EUVD-2025-17213) *************** 📎Link: https://vuldb.com/?id.311501 *************** ⚙️Information: #Product: Taskbuilder Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:12 +0200 *************** ✏️Title: CVE-2025-30946 | Michael Cannon Custom Bulk Quick Edit Plugin up to 1.6.10 on WordPress cross-site request forgery (EUVD-2025-17214) *************** 📎Link: https://vuldb.com/?id.311502 *************** ⚙️Information: #Vendor: Michael Cannon #Product: Custom Bulk Quick Edit Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:18 +0200 *************** ✏️Title: CVE-2025-30951 | Stiofan BlockStrap Page Builder Plugin up to 0.1.36 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311503 *************** ⚙️Information: #Vendor: Stiofan #Product: BlockStrap Page Builder Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:22 +0200 *************** ✏️Title: CVE-2025-30952 | wpdive Nexa Blocks Plugin up to 1.1.0 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311504 *************** ⚙️Information: #Vendor: wpdive #Product: Nexa Blocks Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:30 +0200 *************** ✏️Title: CVE-2025-30956 | Booqable Rental Plugin up to 2.4.20 on WordPress cross-site request forgery (EUVD-2025-17221) *************** 📎Link: https://vuldb.com/?id.311505 *************** ⚙️Information: #Product: Booqable Rental Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:41:39 +0200 *************** ✏️Title: CVE-2025-49441 | WP Map Plugins Interactive Regional Map of Florida Plugin up to 1.0 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311506 *************** ⚙️Information: #Vendor: WP Map Plugins #Product: Interactive Regional Map of Florida Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:41:40 +0200 *************** ✏️Title: CVE-2025-30994 | Emraan Cheema CubeWP Plugin up to 1.1.23 on WordPress cross-site request forgery (EUVD-2025-17235) *************** 📎Link: https://vuldb.com/?id.311507 *************** ⚙️Information: #Vendor: Emraan Cheema #Product: CubeWP Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:41:41 +0200 *************** ✏️Title: CVE-2025-49429 | Ryan Burnette Video Embeds Plugin up to 0.1.1 on WordPress cross site scripting (EUVD-2025-17143) *************** 📎Link: https://vuldb.com/?id.311508 *************** ⚙️Information: #Vendor: Ryan Burnette #Product: Video Embeds Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:41:42 +0200 *************** ✏️Title: CVE-2025-49442 | Mostafa Shahiri Simple Nested Menu Plugin up to 1.0 on WordPress cross site scripting (EUVD-2025-17147) *************** 📎Link: https://vuldb.com/?id.311509 *************** ⚙️Information: #Vendor: Mostafa Shahiri #Product: Simple Nested Menu Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:41:43 +0200 *************** ✏️Title: CVE-2025-49427 | Ryan Burnette Abbie Expander Plugin up to 1.0.1 on WordPress cross site scripting (EUVD-2025-17142) *************** 📎Link: https://vuldb.com/?id.311510 *************** ⚙️Information: #Vendor: Ryan Burnette #Product: Abbie Expander Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:41:43 +0200 *************** ✏️Title: CVE-2025-30980 | Alessandro Piconi Simple Keyword to Link Plugin up to 1.5 on WordPress cross-site request forgery (EUVD-2025-17229) *************** 📎Link: https://vuldb.com/?id.311511 *************** ⚙️Information: #Vendor: Alessandro Piconi #Product: Simple Keyword to Link Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:41:51 +0200 *************** ✏️Title: CVE-2025-49450 | mhallmann SEPA Girocode Plugin up to 0.5.1 on WordPress cross site scripting (EUVD-2025-17152) *************** 📎Link: https://vuldb.com/?id.311512 *************** ⚙️Information: #Vendor: mhallmann #Product: SEPA Girocode Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:41:52 +0200 *************** ✏️Title: CVE-2025-49443 | Chris McCoy Bacon Ipsum Plugin up to 2.4 on WordPress cross site scripting (EUVD-2025-17148) *************** 📎Link: https://vuldb.com/?id.311513 *************** ⚙️Information: #Vendor: Chris McCoy #Product: Bacon Ipsum Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:41:53 +0200 *************** ✏️Title: CVE-2025-30991 | Shahjada Premium Packages Plugin up to 6.0.2 on WordPress cross site scripting (EUVD-2025-17234) *************** 📎Link: https://vuldb.com/?id.311514 *************** ⚙️Information: #Vendor: Shahjada #Product: Premium Packages Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:41:59 +0200 *************** ✏️Title: CVE-2025-49439 | mariusz88atelierweb Atelier Create CV Plugin up to 1.1.2 on WordPress cross-site request forgery (EUVD-2025-17145) *************** 📎Link: https://vuldb.com/?id.311515 *************** ⚙️Information: #Vendor: mariusz88atelierweb #Product: Atelier Create CV Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:42:04 +0200 *************** ✏️Title: CVE-2025-24772 | cmsMinds Pay with Contact Form 7 Plugin up to 1.0.4 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311516 *************** ⚙️Information: #Vendor: cmsMinds #Product: Pay with Contact Form 7 Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:44:52 +0200 *************** ✏️Title: CVE-2025-28966 | dilemma123 Recent Posts Slider Responsive Plugin up to 1.0.1 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311517 *************** ⚙️Information: #Vendor: dilemma123 #Product: Recent Posts Slider Responsive Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:44:59 +0200 *************** ✏️Title: CVE-2025-29008 | ShawonPro SocialMark Plugin up to 2.0.7 on WordPress server-side request forgery *************** 📎Link: https://vuldb.com/?id.311518 *************** ⚙️Information: #Vendor: ShawonPro #Product: SocialMark Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:45:05 +0200 *************** ✏️Title: CVE-2025-30976 | wpdive Nexa Blocks Plugin up to 1.1.0 on WordPress server-side request forgery (EUVD-2025-17226) *************** 📎Link: https://vuldb.com/?id.311519 *************** ⚙️Information: #Vendor: wpdive #Product: Nexa Blocks Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:45:11 +0200 *************** ✏️Title: CVE-2025-30997 | SmartDataSoft Car Repair Services Plugin up to 5.0 on WordPress server-side request forgery (EUVD-2025-17237) *************** 📎Link: https://vuldb.com/?id.311520 *************** ⚙️Information: #Vendor: SmartDataSoft #Product: Car Repair Services Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security