🛡 Cybersecurity & Privacy 🛡 - CVEs
Open in Telegram
🔐 Explore the latest CVEs in cybersecurity and privacy. 🔔 Daily updates. 💻 Ensuring your online security. 📩 lalilolalo.dev@gmail.com
Show more431
Subscribers
No data24 hours
No data7 days
-330 days
Posts Archive
‼️ CVE-2025-55713 ‼️
Improper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in CreativeThemes Blocksy allows Stored XSS. This issue affects Blocksy from na through 2.1.6.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-55712 ‼️
Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Plus Addons for Elementor Page Builder Lite from na through 6.3.13.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-55711 ‼️
Improper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in WP Table Builder WP Table Builder allows Stored XSS. This issue affects WP Table Builder from na through 2.0.12.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-55710 ‼️
Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress allows Retrieve Embedded Sensitive Data. This issue affects TaxoPress from na through 3.37.2.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-55709 ‼️
Improper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in Visual Composer Visual Composer Website Builder allows Stored XSS. This issue affects Visual Composer Website Builder from na through na.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-55708 ‼️
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ExpressTech Systems Quiz And Survey Master allows SQL Injection. This issue affects Quiz And Survey Master from na through 10.2.4.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54749 ‼️
Improper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in Crocoblock JetProductGallery allows Stored XSS. This issue affects JetProductGallery from na through 2.2.0.2.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54747 ‼️
Improper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in wpbakery Templatera allows DOMBased XSS. This issue affects Templatera from na through 2.3.0.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54746 ‼️
Improper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in cartpauj Shortcode Redirect allows Stored XSS. This issue affects Shortcode Redirect from na through 1.0.02.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54740 ‼️
Improper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in Michael Nelson Print My Blog allows Stored XSS. This issue affects Print My Blog from na through 3.27.9.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54739 ‼️
Missing Authorization vulnerability in POSIMYTH Nexter Blocks allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Nexter Blocks from na through 4.5.4.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54736 ‼️
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NordicMade Savoy allows Retrieve Embedded Sensitive Data. This issue affects Savoy from na through 3.0.8.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54732 ‼️
CrossSite Request Forgery CSRF vulnerability in Shahjada WPDM Premium Packages allows Cross Site Request Forgery. This issue affects WPDM Premium Packages from na through 6.0.2.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54730 ‼️
Missing Authorization vulnerability in PARETO Digital Embedder for Google Reviews allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Embedder for Google Reviews from na through 1.7.3.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54729 ‼️
Improper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in Webba Appointment Booking Webba Booking allows Stored XSS. This issue affects Webba Booking from na through 6.0.5.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54728 ‼️
CrossSite Request Forgery CSRF vulnerability in CreativeMindsSolutions CM On Demand Search And Replace allows Cross Site Request Forgery. This issue affects CM On Demand Search And Replace from na through 1.5.2.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54727 ‼️
Improper Neutralization of Input During Web Page Generation 'Crosssite Scripting' vulnerability in CreativeMindsSolutions CM On Demand Search And Replace allows Stored XSS. This issue affects CM On Demand Search And Replace from na through 1.5.2.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54717 ‼️
Missing Authorization vulnerability in eplugins WP Membership allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Membership from na through 1.6.3.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54715 ‼️
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory Order Manager allows Path Traversal. This issue affects Barcode Scanner with Inventory Order Manager from na through 1.9.0.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs‼️ CVE-2025-54712 ‼️
Missing Authorization vulnerability in hashthemes Easy Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Easy Elementor Addons from na through 2.2.7.
📖 Read more.
🔗 Via "National Vulnerability Database"
----------
👁️ Seen on @cibsecurity_CVEs