Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:36:11 +0200 *************** ✏️Title: CVE-2025-30950 | WP Wham All Currencies for WooCommerce Plugin up to 2.4.4 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311489 *************** ⚙️Information: #Vendor: WP Wham #Product: All Currencies for WooCommerce Plugin #Type: E_Commerce Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:38:32 +0200 *************** ✏️Title: CVE-2025-30928 | vicchi WP Biographia Plugin up to 4.0.0 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311490 *************** ⚙️Information: #Vendor: vicchi #Product: WP Biographia Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:38:32 +0200 *************** ✏️Title: CVE-2025-30927 | Wordapp Plugin up to 1.7.0 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311491 *************** ⚙️Information: #Product: Wordapp Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:38:44 +0200 *************** ✏️Title: CVE-2025-30937 | stefanledin Responsify WP Plugin up to 1.9.11 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311492 *************** ⚙️Information: #Vendor: stefanledin #Product: Responsify WP Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:38:44 +0200 *************** ✏️Title: CVE-2025-30931 | Shamil Shafeev Подсказки Plugin up to 1.0.6 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311493 *************** ⚙️Information: #Vendor: Shamil Shafeev #Product: Подсказки Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:38:45 +0200 *************** ✏️Title: CVE-2025-30941 | Marvie Pons Pinterest Verify Meta Tag Plugin up to 1.3 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311494 *************** ⚙️Information: #Vendor: Marvie Pons #Product: Pinterest Verify Meta Tag Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:38:46 +0200 *************** ✏️Title: CVE-2025-30930 | Unreal Themes ACF Yandex Maps Field Plugin up to 1.1 on WordPress cross site scripting (EUVD-2025-17202) *************** 📎Link: https://vuldb.com/?id.311495 *************** ⚙️Information: #Vendor: Unreal Themes #Product: ACF Yandex Maps Field Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:07 +0200 *************** ✏️Title: CVE-2025-30942 | OTWthemes Post Custom Templates Lite Plugin up to 1.14 on WordPress cross site scripting (EUVD-2025-17212) *************** 📎Link: https://vuldb.com/?id.311496 *************** ⚙️Information: #Vendor: OTWthemes #Product: Post Custom Templates Lite Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:08 +0200 *************** ✏️Title: CVE-2025-30940 | Melipayamak Plugin up to 2.2.12 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311497 *************** ⚙️Information: #Product: Melipayamak Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:09 +0200 *************** ✏️Title: CVE-2025-30935 | NickDuncan Contact Form Plugin up to 2.0.12 on WordPress cross site scripting (EUVD-2025-17206) *************** 📎Link: https://vuldb.com/?id.311498 *************** ⚙️Information: #Vendor: NickDuncan #Product: Contact Form Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:09 +0200 *************** ✏️Title: CVE-2025-30948 | Giraphix Creative Layouts for Elementor Plugin up to 1.11 on WordPress cross-site request forgery (EUVD-2025-17215) *************** 📎Link: https://vuldb.com/?id.311499 *************** ⚙️Information: #Vendor: Giraphix Creative #Product: Layouts for Elementor Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:10 +0200 *************** ✏️Title: CVE-2025-30939 | Debashish IFrame Widget Plugin up to 4.1 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311500 *************** ⚙️Information: #Vendor: Debashish #Product: IFrame Widget Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:11 +0200 *************** ✏️Title: CVE-2025-30945 | Taskbuilder Plugin up to 4.0.3 on WordPress authorization (EUVD-2025-17213) *************** 📎Link: https://vuldb.com/?id.311501 *************** ⚙️Information: #Product: Taskbuilder Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:12 +0200 *************** ✏️Title: CVE-2025-30946 | Michael Cannon Custom Bulk Quick Edit Plugin up to 1.6.10 on WordPress cross-site request forgery (EUVD-2025-17214) *************** 📎Link: https://vuldb.com/?id.311502 *************** ⚙️Information: #Vendor: Michael Cannon #Product: Custom Bulk Quick Edit Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:18 +0200 *************** ✏️Title: CVE-2025-30951 | Stiofan BlockStrap Page Builder Plugin up to 0.1.36 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311503 *************** ⚙️Information: #Vendor: Stiofan #Product: BlockStrap Page Builder Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:22 +0200 *************** ✏️Title: CVE-2025-30952 | wpdive Nexa Blocks Plugin up to 1.1.0 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311504 *************** ⚙️Information: #Vendor: wpdive #Product: Nexa Blocks Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:39:30 +0200 *************** ✏️Title: CVE-2025-30956 | Booqable Rental Plugin up to 2.4.20 on WordPress cross-site request forgery (EUVD-2025-17221) *************** 📎Link: https://vuldb.com/?id.311505 *************** ⚙️Information: #Product: Booqable Rental Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:41:39 +0200 *************** ✏️Title: CVE-2025-49441 | WP Map Plugins Interactive Regional Map of Florida Plugin up to 1.0 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311506 *************** ⚙️Information: #Vendor: WP Map Plugins #Product: Interactive Regional Map of Florida Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:41:40 +0200 *************** ✏️Title: CVE-2025-30994 | Emraan Cheema CubeWP Plugin up to 1.1.23 on WordPress cross-site request forgery (EUVD-2025-17235) *************** 📎Link: https://vuldb.com/?id.311507 *************** ⚙️Information: #Vendor: Emraan Cheema #Product: CubeWP Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:41:41 +0200 *************** ✏️Title: CVE-2025-49429 | Ryan Burnette Video Embeds Plugin up to 0.1.1 on WordPress cross site scripting (EUVD-2025-17143) *************** 📎Link: https://vuldb.com/?id.311508 *************** ⚙️Information: #Vendor: Ryan Burnette #Product: Video Embeds Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security