Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:31:17 +0200 *************** ✏️Title: CVE-2025-30974 | Akhtarujjaman Shuvo Post Grid Master Plugin up to 3.4.13 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311464 *************** ⚙️Information: #Vendor: Akhtarujjaman Shuvo #Product: Post Grid Master Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:31:18 +0200 *************** ✏️Title: CVE-2025-30989 | Renzo Tejada Libro de Reclamaciones y Quejas Plugin up to 0.9 on WordPress sql injection *************** 📎Link: https://vuldb.com/?id.311465 *************** ⚙️Information: #Vendor: Renzo Tejada #Product: Libro de Reclamaciones y Quejas Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:31:19 +0200 *************** ✏️Title: CVE-2025-30932 | WP Compress for MainWP Plugin up to 6.30.32 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311466 *************** ⚙️Information: #Product: WP Compress for MainWP Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:31:20 +0200 *************** ✏️Title: CVE-2025-30990 | ThemeHunk Plugin up to 1.1.1 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311467 *************** ⚙️Information: #Product: ThemeHunk Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:31:29 +0200 *************** ✏️Title: CVE-2025-30636 | Ability Accessibility Suite Plugin up to 4.19 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311468 *************** ⚙️Information: #Vendor: Ability #Product: Accessibility Suite Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:31:36 +0200 *************** ✏️Title: CVE-2025-30957 | BuddyDev Activity Plus Reloaded for BuddyPress Plugin up to 1.1.2 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311469 *************** ⚙️Information: #Vendor: BuddyDev #Product: Activity Plus Reloaded for BuddyPress Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 13:26:38 +0000 *************** ✏️Title: Chrome Extensions Vulnerability Exposes API Keys, Secrets, and Tokens *************** 📎Link: https://cybersecuritynews.com/?p=110110 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 18:42:00 +0530 *************** ✏️Title: Microsoft Helps CBI Dismantle Indian Call Centers Behind Japanese Tech Support Scam *************** 📎Link: https://thehackernews.com/2025/06/microsoft-helps-cbi-dismantle-indian.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 19:11:00 +0530 *************** ✏️Title: Empower Users and Protect Against GenAI Data Loss *************** 📎Link: https://thehackernews.com/2025/06/empower-users-and-protect-against-genai.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 12:15:21 +0000 *************** ✏️Title: CVE-2025-39358 - Teastudio.Pl WP Posts Carousel Object Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-39358 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 13:15:29 +0000 *************** ✏️Title: CVE-2025-28986 - Webaholicson Epicwin Plugin CSRF SQL Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-28986 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 13:15:40 +0000 *************** ✏️Title: CVE-2025-49072 - AncoraThemes Mr. Murphy Object Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49072 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 13:15:40 +0000 *************** ✏️Title: CVE-2025-49073 - Axiomthemes Sweet Dessert Deserialization of Untrusted Data Object Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49073 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 13:15:48 +0000 *************** ✏️Title: CVE-2025-49323 - Themefic Hydra Booking SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49323 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 12:15:22 +0000 *************** ✏️Title: CVE-2025-41360 - Cisco IDF Denial of Service Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-41360 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 12:15:22 +0000 *************** ✏️Title: CVE-2025-41361 - Juniper Networks ProCOME TLS Denial of Service (DoS) *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-41361 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 12:15:22 +0000 *************** ✏️Title: CVE-2025-41362 - IDF/ ZLF Browser Code Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-41362 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 12:15:22 +0000 *************** ✏️Title: CVE-2025-41363 - "ZLF IDF CORS Authentication Bypass" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-41363 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 12:15:22 +0000 *************** ✏️Title: CVE-2025-41364 - Microsoft IDF Stored Cross-Site Scripting (XSS) Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-41364 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 12:15:22 +0000 *************** ✏️Title: CVE-2025-41365 - IDF/ZLF Code Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-41365 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security