https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 22 Jul 2026 23:09:53 +0000 https://db.gcve.eu/sighting/ade4541f-09fb-41f5-a571-802c23d5e33c/export {"uuid": "ade4541f-09fb-41f5-a571-802c23d5e33c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24537", "type": "seen", "source": "https://t.me/cibsecurity/31992", "content": "\u203c CVE-2021-24537 \u203c\n\nThe Similar Posts WordPress plugin through 3.1.5 allow high privilege users to execute arbitrary PHP code in an hardened environment (ie with DISALLOW_FILE_EDIT, DISALLOW_FILE_MODS and DISALLOW_UNFILTERED_HTML set to true) via the 'widget_rrm_similar_posts_condition' widget setting of the plugin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-08T20:29:18.000000Z"} {"uuid": "ade4541f-09fb-41f5-a571-802c23d5e33c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24537", "type": "seen", "source": "https://t.me/cibsecurity/31992", "content": "\u203c CVE-2021-24537 \u203c\n\nThe Similar Posts WordPress plugin through 3.1.5 allow high privilege users to execute arbitrary PHP code in an hardened environment (ie with DISALLOW_FILE_EDIT, DISALLOW_FILE_MODS and DISALLOW_UNFILTERED_HTML set to true) via the 'widget_rrm_similar_posts_condition' widget setting of the plugin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-08T20:29:18.000000Z"} https://db.gcve.eu/sighting/ade4541f-09fb-41f5-a571-802c23d5e33c/export Mon, 08 Nov 2021 20:29:18 +0000 https://db.gcve.eu/sighting/0e98b18d-30ab-46f2-8fd3-bfacdd79548f/export {"uuid": "0e98b18d-30ab-46f2-8fd3-bfacdd79548f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24535", "type": "seen", "source": "https://t.me/cibsecurity/27368", "content": "\u203c CVE-2021-24535 \u203c\n\nThe Light Messages WordPress plugin through 1.0 is lacking CSRF check when updating it's settings, and is not sanitising its Message Content in them (even with the unfiltered_html disallowed). As a result, an attacker could make a logged in admin update the settings to arbitrary values, and set a Cross-Site Scripting payload in the Message Content. Depending on the options set, the XSS payload can be triggered either in the backend only (in the plugin's settings), or both frontend and backend.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-16T14:14:52.000000Z"} {"uuid": "0e98b18d-30ab-46f2-8fd3-bfacdd79548f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24535", "type": "seen", "source": "https://t.me/cibsecurity/27368", "content": "\u203c CVE-2021-24535 \u203c\n\nThe Light Messages WordPress plugin through 1.0 is lacking CSRF check when updating it's settings, and is not sanitising its Message Content in them (even with the unfiltered_html disallowed). As a result, an attacker could make a logged in admin update the settings to arbitrary values, and set a Cross-Site Scripting payload in the Message Content. Depending on the options set, the XSS payload can be triggered either in the backend only (in the plugin's settings), or both frontend and backend.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-16T14:14:52.000000Z"} https://db.gcve.eu/sighting/0e98b18d-30ab-46f2-8fd3-bfacdd79548f/export Mon, 16 Aug 2021 14:14:52 +0000 https://db.gcve.eu/sighting/edd3e15c-c5cd-42b9-93c4-93082a23b1a5/export {"uuid": "edd3e15c-c5cd-42b9-93c4-93082a23b1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24534", "type": "seen", "source": "https://t.me/cibsecurity/27362", "content": "\u203c CVE-2021-24534 \u203c\n\nThe PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its \"php_id\" setting before outputting it back in an attribute in the page, leading to a stored Cross-Site Scripting issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-16T14:14:44.000000Z"} {"uuid": "edd3e15c-c5cd-42b9-93c4-93082a23b1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24534", "type": "seen", "source": "https://t.me/cibsecurity/27362", "content": "\u203c CVE-2021-24534 \u203c\n\nThe PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its \"php_id\" setting before outputting it back in an attribute in the page, leading to a stored Cross-Site Scripting issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-16T14:14:44.000000Z"} https://db.gcve.eu/sighting/edd3e15c-c5cd-42b9-93c4-93082a23b1a5/export Mon, 16 Aug 2021 14:14:44 +0000 https://db.gcve.eu/sighting/ff1c8ce0-5534-4075-9e3b-19847be76df9/export {"uuid": "ff1c8ce0-5534-4075-9e3b-19847be76df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24536", "type": "seen", "source": "https://t.me/cibsecurity/27355", "content": "\u203c CVE-2021-24536 \u203c\n\nThe Custom Login Redirect WordPress plugin through 1.0.0 does not have CSRF check in place when saving its settings, and do not sanitise or escape user input before outputting them back in the page, leading to a Stored Cross-Site Scripting issue\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-16T14:14:34.000000Z"} {"uuid": "ff1c8ce0-5534-4075-9e3b-19847be76df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24536", "type": "seen", "source": "https://t.me/cibsecurity/27355", "content": "\u203c CVE-2021-24536 \u203c\n\nThe Custom Login Redirect WordPress plugin through 1.0.0 does not have CSRF check in place when saving its settings, and do not sanitise or escape user input before outputting them back in the page, leading to a Stored Cross-Site Scripting issue\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-16T14:14:34.000000Z"} https://db.gcve.eu/sighting/ff1c8ce0-5534-4075-9e3b-19847be76df9/export Mon, 16 Aug 2021 14:14:34 +0000 https://db.gcve.eu/sighting/f6145a65-17cf-4f51-ae95-914c6319d7cb/export {"uuid": "f6145a65-17cf-4f51-ae95-914c6319d7cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24538", "type": "seen", "source": "https://t.me/cibsecurity/27351", "content": "\u203c CVE-2021-24538 \u203c\n\nThe Current Book WordPress plugin through 1.0.1 does not sanitize user input when an authenticated user adds Author or Book Title, then does not escape these values when outputting to the browser leading to an Authenticated Stored XSS Cross-Site Scripting issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-16T14:14:29.000000Z"} {"uuid": "f6145a65-17cf-4f51-ae95-914c6319d7cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24538", "type": "seen", "source": "https://t.me/cibsecurity/27351", "content": "\u203c CVE-2021-24538 \u203c\n\nThe Current Book WordPress plugin through 1.0.1 does not sanitize user input when an authenticated user adds Author or Book Title, then does not escape these values when outputting to the browser leading to an Authenticated Stored XSS Cross-Site Scripting issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-16T14:14:29.000000Z"} https://db.gcve.eu/sighting/f6145a65-17cf-4f51-ae95-914c6319d7cb/export Mon, 16 Aug 2021 14:14:29 +0000