logo_clicknbuy.png

Day: 29 March 2025

CISA Warns of ESURGE Malware Exploiting Ivanti RCE Vulnerability

CISA Warns of ESURGE Malware Exploiting Ivanti RCE Vulnerability The Cybersecurity and Infrastructure Security Agency (CISA) has issued a Malware Analysis Report (MAR-25993211-r1.v1) detailing the exploitation of a critical vulnerability in Ivanti Connect Secure de … Read more Published Date: Mar 29, 2025 (2 hours, 6 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-0282

CVE-2024-55895 – IBM InfoSphere Information Server Information Disclosure Vulnerability

The following table lists the changes that have been made to the CVE-2024-55895 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Mar. 29, 2025 Action […]

CVE-2024-11180 – “ElementsKit Elementor Addons WordPress Stored Cross-Site Scripting Vulnerability”

The following table lists the changes that have been made to the CVE-2024-11180 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Mar. 29, 2025 Action […]

CVE-2025-2840 – WordPress DAP to Autoresponders Email Syncing Sensitive Information Exposure

CVE ID : CVE-2025-2840 Published : March 29, 2025, 7:15 a.m. | 24 minutes ago Description : The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially […]

CVE-2025-2266 – WooCommerce Checkout Mestres do WP Privilege Escalation Vulnerability

CVE ID : CVE-2025-2266 Published : March 29, 2025, 7:15 a.m. | 24 minutes ago Description : The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions() function in versions 8.6.5 to 8.7.5. This […]

CVE-2025-2249 – “WordPress SoJ SoundSlides Arbitrary File Upload Vulnerability”

CVE ID : CVE-2025-2249 Published : March 29, 2025, 7:15 a.m. | 24 minutes ago Description : The SoJ SoundSlides plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the soj_soundslides_options_subpanel() function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Contributor-level […]