Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:44:58 +0100 *************** ✏️Title: CVE-2025-25094 | Amitythemes Breaking News Ticker Plugin up to 2.4.4 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294944 *************** ⚙️Information: #Vendor: Amitythemes #Product: Breaking News Ticker Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:45:28 +0100 *************** ✏️Title: CVE-2025-25076 | nicholaswilson Graceful Email Obfuscation Plugin up to 0.2.2 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294945 *************** ⚙️Information: #Vendor: nicholaswilson #Product: Graceful Email Obfuscation Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:45:29 +0100 *************** ✏️Title: CVE-2025-25073 | Vasilis Triantafyllou Easy WP Tiles Plugin up to 1 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294946 *************** ⚙️Information: #Vendor: Vasilis Triantafyllou #Product: Easy WP Tiles Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:49:26 +0100 *************** ✏️Title: CVE-2025-25079 | Garrett Grimm Simple Select All Text Box Plugin up to 3.2 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294947 *************** ⚙️Information: #Vendor: Garrett Grimm #Product: Simple Select All Text Box Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:49:27 +0100 *************** ✏️Title: CVE-2025-25116 | sudipto Link to URL Post Plugin up to 1.3 on WordPress sql injection *************** 📎Link: https://vuldb.com/?id.294948 *************** ⚙️Information: #Vendor: sudipto #Product: Link to URL Post Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:49:28 +0100 *************** ✏️Title: CVE-2025-25151 | StylemixThemes uListing Plugin up to 2.1.6 on WordPress sql injection *************** 📎Link: https://vuldb.com/?id.294949 *************** ⚙️Information: #Vendor: StylemixThemes #Product: uListing Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:49:44 +0100 *************** ✏️Title: CVE-2025-25077 | dugbug Easy Chart Builder Plugin up to 1.3 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294950 *************** ⚙️Information: #Vendor: dugbug #Product: Easy Chart Builder Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:51:50 +0100 *************** ✏️Title: CVE-2025-25080 | gubbigubbi Kona Gallery Block Plugin up to 1.7 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294951 *************** ⚙️Information: #Vendor: gubbigubbi #Product: Kona Gallery Block Plugin #Type: Photo Gallery Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:51:50 +0100 *************** ✏️Title: CVE-2025-25081 | DeannaS Embed RSS Plugin up to 3.1 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.294952 *************** ⚙️Information: #Vendor: DeannaS #Product: Embed RSS Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:52:15 +0100 *************** ✏️Title: CVE-2025-25096 | titusbicknell RSS in Page Plugin up to 2.9.1 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294953 *************** ⚙️Information: #Vendor: titusbicknell #Product: RSS in Page Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:52:42 +0100 *************** ✏️Title: CVE-2025-25095 | reverbnationdev ReverbNation Widgets Plugin up to 2.1 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294954 *************** ⚙️Information: #Vendor: reverbnationdev #Product: ReverbNation Widgets Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:53:26 +0100 *************** ✏️Title: CVE-2025-25105 | coffeestudios Pop Up Plugin up to 0.1 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294955 *************** ⚙️Information: #Vendor: coffeestudios #Product: Pop Up Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:53:27 +0100 *************** ✏️Title: CVE-2025-25082 | Max Chirkov FlexIDX Home Search Plugin up to 2.1.2 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294956 *************** ⚙️Information: #Vendor: Max Chirkov #Product: FlexIDX Home Search Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:53:28 +0100 *************** ✏️Title: CVE-2025-25085 | matt_mcbrien WP SimpleWeather Plugin up to 0.2.5 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294957 *************** ⚙️Information: #Vendor: matt_mcbrien #Product: WP SimpleWeather Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:54:41 +0100 *************** ✏️Title: CVE-2025-25091 | zackdesign NextGen Cooliris Gallery Plugin up to 0.7 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294958 *************** ⚙️Information: #Vendor: zackdesign #Product: NextGen Cooliris Gallery Plugin #Type: Photo Gallery Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:55:08 +0100 *************** ✏️Title: CVE-2025-25097 | kwiliarty External Video for Everybody Plugin up to 2.1.1 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294959 *************** ⚙️Information: #Vendor: kwiliarty #Product: External Video for Everybody Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:55:58 +0100 *************** ✏️Title: CVE-2025-25098 | Zack Katz Links in Captions Plugin up to 1.2 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294960 *************** ⚙️Information: #Vendor: Zack Katz #Product: Links in Captions Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:58:38 +0100 *************** ✏️Title: CVE-2025-25163 | Zach Swetz Plugin A B Image Optimizer Plugin up to 3.3 on WordPress path traversal *************** 📎Link: https://vuldb.com/?id.294961 *************** ⚙️Information: #Vendor: Zach Swetz #Product: Plugin A B Image Optimizer Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:59:24 +0100 *************** ✏️Title: CVE-2025-25155 | efreja Music Sheet Viewer Plugin up to 4.1 on WordPress path traversal *************** 📎Link: https://vuldb.com/?id.294962 *************** ⚙️Information: #Vendor: efreja #Product: Music Sheet Viewer Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 13:59:25 +0100 *************** ✏️Title: CVE-2025-25144 | Theasys Plugin up to 1.0.1 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.294963 *************** ⚙️Information: #Product: Theasys Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security