Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:25:41 +0200 *************** ✏️Title: CVE-2025-49419 | esigngenie Foxit eSign for WordPress Plugin up to 2.0.3 on WordPress exposure of sensitive system information to an unauthorized control sphere *************** 📎Link: https://vuldb.com/?id.311444 *************** ⚙️Information: #Vendor: esigngenie #Product: Foxit eSign for WordPress Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:25:45 +0200 *************** ✏️Title: CVE-2025-30953 | CRM Perks WP Gravity Forms Salesforce Plugin up to 1.4.7 on WordPress redirect *************** 📎Link: https://vuldb.com/?id.311445 *************** ⚙️Information: #Vendor: CRM Perks #Product: WP Gravity Forms Salesforce Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:25:50 +0200 *************** ✏️Title: CVE-2023-26002 | 6Storage Rentals Plugin up to 2.19.5 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311446 *************** ⚙️Information: #Vendor: 6Storage #Product: Rentals Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:27:25 +0200 *************** ✏️Title: CVE-2023-26003 | Vipul Jariwala WP Post Corrector Plugin up to 1.0.2 on WordPress sql injection *************** 📎Link: https://vuldb.com/?id.311447 *************** ⚙️Information: #Vendor: Vipul Jariwala #Product: WP Post Corrector Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:27:26 +0200 *************** ✏️Title: CVE-2025-23969 | whassan KI Live Video Conferences Plugin up to 5.5.15 on WordPress exposure of sensitive system information to an unauthorized control sphere *************** 📎Link: https://vuldb.com/?id.311448 *************** ⚙️Information: #Vendor: whassan #Product: KI Live Video Conferences Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:27:27 +0200 *************** ✏️Title: CVE-2025-23971 | whassan KI Live Video Conferences Plugin up to 5.5.15 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311449 *************** ⚙️Information: #Vendor: whassan #Product: KI Live Video Conferences Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:27:27 +0200 *************** ✏️Title: CVE-2025-28994 | viralloops Viral Loops WP Integration Plugin up to 3.8.1 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311450 *************** ⚙️Information: #Vendor: viralloops #Product: Viral Loops WP Integration Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:27:47 +0200 *************** ✏️Title: CVE-2025-24778 | De Paragon No Spam at All Plugin up to 1.3 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311451 *************** ⚙️Information: #Vendor: De Paragon #Product: No Spam at All Plugin #Type: Anti_Spam Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:28:08 +0200 *************** ✏️Title: CVE-2025-24776 | codelobster Responsive Flipbooks Plugin up to 1.0 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311452 *************** ⚙️Information: #Vendor: codelobster #Product: Responsive Flipbooks Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:28:47 +0200 *************** ✏️Title: CVE-2025-24763 | Pascal Casier bbPress API Plugin up to 1.0.14 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311453 *************** ⚙️Information: #Vendor: Pascal Casier #Product: bbPress API Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:29:02 +0200 *************** ✏️Title: CVE-2025-28995 | viralloops Viral Loops WP Integration Plugin up to 3.8.1 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311454 *************** ⚙️Information: #Vendor: viralloops #Product: Viral Loops WP Integration Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:29:03 +0200 *************** ✏️Title: CVE-2025-28996 | Thad Allender GPP Slideshow Plugin up to 1.3.5 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311455 *************** ⚙️Information: #Vendor: Thad Allender #Product: GPP Slideshow Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:29:04 +0200 *************** ✏️Title: CVE-2025-28997 | EXEIdeas International WP AutoKeyword Plugin up to 1.0 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311456 *************** ⚙️Information: #Vendor: EXEIdeas International #Product: WP AutoKeyword Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:29:06 +0200 *************** ✏️Title: CVE-2025-29010 | eleopard Behance Portfolio Manager Plugin up to 1.7.4 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311457 *************** ⚙️Information: #Vendor: eleopard #Product: Behance Portfolio Manager Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:29:11 +0200 *************** ✏️Title: CVE-2025-28985 | Elastic Email Subscribe Form Plugin up to 1.2.2 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311458 *************** ⚙️Information: #Vendor: Elastic Email #Product: Subscribe Form Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:30:49 +0200 *************** ✏️Title: CVE-2025-29013 | faaiq Custom Category Post Type Post Order Plugin up to 1.5.9 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311459 *************** ⚙️Information: #Vendor: faaiq #Product: Custom Category Post Type Post Order Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:30:50 +0200 *************** ✏️Title: CVE-2025-30938 | Broadly Plugin up to 3.0.2 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311460 *************** ⚙️Information: #Product: Broadly Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:30:51 +0200 *************** ✏️Title: CVE-2025-30958 | onOffice for WP-Websites Plugin up to 5.7 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311461 *************** ⚙️Information: #Product: onOffice for WP_Websites Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:31:15 +0200 *************** ✏️Title: CVE-2025-30978 | Dor Zuberi Slack Notifications Plugin up to 2.0.7 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311462 *************** ⚙️Information: #Vendor: Dor Zuberi #Product: Slack Notifications Plugin #Type: Messaging Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:31:16 +0200 *************** ✏️Title: CVE-2025-30934 | OLIVESYSTEM 診断ジェネレータ作成プラグイン Plugin authorization *************** 📎Link: https://vuldb.com/?id.311463 *************** ⚙️Information: #Vendor: OLIVESYSTEM #Product: 診断ジェネレータ作成プラグイン Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security