CVE-2024-12824 – Nokri – Job Board WordPress Theme Privilege Escalation Vulnerability

The following table lists the changes that have been made to the CVE-2024-12824 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Mar. 01, 2025 Action […]

CVE-2025-27554 – Cursor Desktop Command Injection Vulnerability

ToDesktop before 2024-10-03, as used by Cursor before 2024-10-03 and other applications, allows remote attackers to execute arbitrary commands on the build server (e.g., read secrets from the desktopify config.prod.json file), and consequently deploy updates to any app, via a postinstall script in package.json. No exploitation occurred.

CVE-2024-13901 – WordPress Counter Box: DOM-Based Stored Cross-Site Scripting Vulnerability

The Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject […]

CVE-2025-0820 – Clicface Trombi Stored Cross-Site Scripting

The following table lists the changes that have been made to the CVE-2025-0820 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Mar. 01, 2025 Action […]

CVE-2024-9217 – WooCommerce Currency Switcher for WordPress Reflected Cross-Site Scripting

The following table lists the changes that have been made to the CVE-2024-9217 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Mar. 01, 2025 Action […]

CVE-2024-9212 – WooCommerce SKU Generator Reflected Cross-Site Scripting Vulnerability

The following table lists the changes that have been made to the CVE-2024-9212 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Mar. 01, 2025 Action […]

CVE-2024-13750 – WordPress WooCommerce Multilevel Referral Affiliate Plugin SQL Injection Vulnerability

The following table lists the changes that have been made to the CVE-2024-13750 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Mar. 01, 2025 Action […]

CVE-2024-13746 – Booking Calendar and Notification Plugin Unauthenticated Remote Code Execution and Data Manipulation Vulnerability

The Booking Calendar and Notification plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on the wpcb_all_bookings(), wpcb_update_booking_post(), and wpcb_delete_posts() functions in all versions up to, and including, 4.0.3. This makes it possible for unauthenticated attackers to extract data, create or update bookings, or delete arbitrary […]

CVE-2024-13568 – WordPress Fluent Support Sensitive Information Exposure

The following table lists the changes that have been made to the CVE-2024-13568 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Mar. 01, 2025 Action […]

CVE-2024-13559 – WordPress TemplatesNext ToolKit Stored Cross-Site Scripting (XSS)

The following table lists the changes that have been made to the CVE-2024-13559 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Mar. 01, 2025 Action […]