Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:14:38 +0100 *************** ✏️Title: CVE-2025-25139 | Cynob IT Consultancy WP Custom Post RSS Feed Plugin up to 1.0.0 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294984 *************** ⚙️Information: #Vendor: Cynob IT Consultancy #Product: WP Custom Post RSS Feed Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:14:38 +0100 *************** ✏️Title: CVE-2025-25140 | Scriptonite Simple User Profile Plugin up to 1.9 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294985 *************** ⚙️Information: #Vendor: Scriptonite #Product: Simple User Profile Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:14:39 +0100 *************** ✏️Title: CVE-2025-25123 | xdark Easy Related Posts Plugin up to 2.0.2 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294986 *************** ⚙️Information: #Vendor: xdark #Product: Easy Related Posts Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:15:04 +0100 *************** ✏️Title: CVE-2025-25071 | topplugins Vignette Ads Plugin up to 0.2 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294987 *************** ⚙️Information: #Vendor: topplugins #Product: Vignette Ads Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:21:38 +0100 *************** ✏️Title: CVE-2025-25088 | blackus3r WP Keyword Monitor Plugin up to 1.0.5 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294988 *************** ⚙️Information: #Vendor: blackus3r #Product: WP Keyword Monitor Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:21:42 +0100 *************** ✏️Title: CVE-2025-25125 | CyrilG Fyrebox Quizzes Plugin up to 2.7 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294989 *************** ⚙️Information: #Vendor: CyrilG #Product: Fyrebox Quizzes Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:21:49 +0100 *************** ✏️Title: CVE-2025-25126 | ZMSEO Plugin up to 1.14.1 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294990 *************** ⚙️Information: #Product: ZMSEO Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:31:54 +0100 *************** ✏️Title: CVE-2025-25147 | Phillip.Gooch Auto SEO Plugin up to 2.5.6 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294991 *************** ⚙️Information: #Vendor: Phillip.Gooch #Product: Auto SEO Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:31:58 +0100 *************** ✏️Title: CVE-2025-25148 | ElbowRobo Read More Copy Link Plugin up to 1.0.2 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294992 *************** ⚙️Information: #Vendor: ElbowRobo #Product: Read More Copy Link Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:32:01 +0100 *************** ✏️Title: CVE-2025-25149 | Danillo Nunes Login-box Plugin up to 2.0.4 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294993 *************** ⚙️Information: #Vendor: Danillo Nunes #Product: Login_box Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:32:05 +0100 *************** ✏️Title: CVE-2025-25152 | LukaszWiecek Smart DoFollow Plugin up to 1.0.2 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294994 *************** ⚙️Information: #Vendor: LukaszWiecek #Product: Smart DoFollow Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:32:32 +0100 *************** ✏️Title: CVE-2025-25156 | Stanko Metodiev Quote Comments Plugin up to 2.2.1 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294995 *************** ⚙️Information: #Vendor: Stanko Metodiev #Product: Quote Comments Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:32:33 +0100 *************** ✏️Title: CVE-2025-25160 | Mark Barnes Style Tweaker Plugin up to 0.11 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294996 *************** ⚙️Information: #Vendor: Mark Barnes #Product: Style Tweaker Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:32:58 +0100 *************** ✏️Title: CVE-2025-25153 | djjmz Simple Auto Tag Plugin up to 1.1 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294997 *************** ⚙️Information: #Vendor: djjmz #Product: Simple Auto Tag Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:32:59 +0100 *************** ✏️Title: CVE-2025-25166 | gabrieldarezzo InLocation Plugin up to 1.8 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294998 *************** ⚙️Information: #Vendor: gabrieldarezzo #Product: InLocation Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:33:09 +0100 *************** ✏️Title: CVE-2025-25154 | scweber Custom Comment Notifications Plugin up to 1.0.8 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.294999 *************** ⚙️Information: #Vendor: scweber #Product: Custom Comment Notifications Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:34:08 +0100 *************** ✏️Title: CVE-2025-25167 | blackandwhitedigital BookPress Plugin up to 1.2.7 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.295000 *************** ⚙️Information: #Vendor: blackandwhitedigital #Product: BookPress Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:34:14 +0100 *************** ✏️Title: CVE-2025-25168 | blackandwhitedigital BookPress Plugin up to 1.2.7 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.295001 *************** ⚙️Information: #Vendor: blackandwhitedigital #Product: BookPress Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 18:22:00 +0530 *************** ✏️Title: CISA Warns of Active Exploitation in Trimble Cityworks Vulnerability Leading to IIS RCE *************** 📎Link: https://thehackernews.com/2025/02/cisa-warns-of-active-exploitation-in.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 12:15:24 GMT *************** ✏️Title: Overanalysing: Getting Hacked (Part Two) *************** 📎Link: https://medium.com/p/ca17f00e6951 *************** ⚙️Tags: #meta #hacking #facebook *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security