https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 05 May 2026 16:44:02 +0000 https://db.gcve.eu/sighting/5da2e207-2867-45ee-ab98-4af9d4bc0fbc/export {"uuid": "5da2e207-2867-45ee-ab98-4af9d4bc0fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1491", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6075", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1491\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WP Posts Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018auto_play_timeout\u2019 parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-01T12:22:40.818Z\n\ud83d\udccf Modified: 2025-03-01T12:22:40.818Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7f708c72-7ce2-4eb0-869b-cec4613f6f3f?source=cve\n2. https://wordpress.org/plugins/wp-posts-carousel/#developers\n3. https://plugins.trac.wordpress.org/changeset/3248502/", "creation_timestamp": "2025-03-01T13:27:29.000000Z"} {"uuid": "5da2e207-2867-45ee-ab98-4af9d4bc0fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1491", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6075", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1491\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WP Posts Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018auto_play_timeout\u2019 parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-01T12:22:40.818Z\n\ud83d\udccf Modified: 2025-03-01T12:22:40.818Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7f708c72-7ce2-4eb0-869b-cec4613f6f3f?source=cve\n2. https://wordpress.org/plugins/wp-posts-carousel/#developers\n3. https://plugins.trac.wordpress.org/changeset/3248502/", "creation_timestamp": "2025-03-01T13:27:29.000000Z"} https://db.gcve.eu/sighting/5da2e207-2867-45ee-ab98-4af9d4bc0fbc/export Sat, 01 Mar 2025 13:27:29 +0000 https://db.gcve.eu/sighting/9d838fa6-2415-42c3-8d89-090271bf008b/export {"uuid": "9d838fa6-2415-42c3-8d89-090271bf008b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1491", "type": "seen", "source": "https://t.me/cvedetector/19238", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-1491 - WordPress WP Posts Carousel Stored Cross-Site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-1491 \nPublished : March 1, 2025, 1:15 p.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The WP Posts Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018auto_play_timeout\u2019 parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"01 Mar 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T16:27:04.000000Z"} {"uuid": "9d838fa6-2415-42c3-8d89-090271bf008b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1491", "type": "seen", "source": "https://t.me/cvedetector/19238", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-1491 - WordPress WP Posts Carousel Stored Cross-Site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-1491 \nPublished : March 1, 2025, 1:15 p.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The WP Posts Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018auto_play_timeout\u2019 parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"01 Mar 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T16:27:04.000000Z"} https://db.gcve.eu/sighting/9d838fa6-2415-42c3-8d89-090271bf008b/export Sat, 01 Mar 2025 16:27:04 +0000 https://db.gcve.eu/sighting/36de21de-cd27-4bcf-8a85-0e3b2140fe2a/export {"uuid": "36de21de-cd27-4bcf-8a85-0e3b2140fe2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1491", "type": "seen", "source": "Telegram/fQwhT3m-JQIcT-R9UMsIx5GWX6a_33IPjwKCBE6dg2xBQgVw", "content": "", "creation_timestamp": "2025-03-02T11:46:59.000000Z"} {"uuid": "36de21de-cd27-4bcf-8a85-0e3b2140fe2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1491", "type": "seen", "source": "Telegram/fQwhT3m-JQIcT-R9UMsIx5GWX6a_33IPjwKCBE6dg2xBQgVw", "content": "", "creation_timestamp": "2025-03-02T11:46:59.000000Z"} https://db.gcve.eu/sighting/36de21de-cd27-4bcf-8a85-0e3b2140fe2a/export Sun, 02 Mar 2025 11:46:59 +0000 https://db.gcve.eu/sighting/7bfcb7b6-3d68-4743-bf62-15ed3b78c3a7/export {"uuid": "7bfcb7b6-3d68-4743-bf62-15ed3b78c3a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1491", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"} {"uuid": "7bfcb7b6-3d68-4743-bf62-15ed3b78c3a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1491", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"} https://db.gcve.eu/sighting/7bfcb7b6-3d68-4743-bf62-15ed3b78c3a7/export Tue, 19 Aug 2025 18:29:28 +0000 https://db.gcve.eu/sighting/af57d666-6523-4c39-a164-4a0d58410095/export {"uuid": "af57d666-6523-4c39-a164-4a0d58410095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-14914", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3mdikcfazoh2w", "content": "", "creation_timestamp": "2026-01-28T15:05:06.344558Z"} {"uuid": "af57d666-6523-4c39-a164-4a0d58410095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-14914", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3mdikcfazoh2w", "content": "", "creation_timestamp": "2026-01-28T15:05:06.344558Z"} https://db.gcve.eu/sighting/af57d666-6523-4c39-a164-4a0d58410095/export Wed, 28 Jan 2026 15:05:06 +0000 https://db.gcve.eu/sighting/adec3d4e-055e-4461-a134-2acea5fa400e/export {"uuid": "adec3d4e-055e-4461-a134-2acea5fa400e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-14914", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvd2i2z4t2a", "content": "", "creation_timestamp": "2026-02-02T17:00:01.563844Z"} {"uuid": "adec3d4e-055e-4461-a134-2acea5fa400e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-14914", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvd2i2z4t2a", "content": "", "creation_timestamp": "2026-02-02T17:00:01.563844Z"} https://db.gcve.eu/sighting/adec3d4e-055e-4461-a134-2acea5fa400e/export Mon, 02 Feb 2026 17:00:01 +0000 https://db.gcve.eu/sighting/3e76353d-aef8-4d55-a5d2-c0e04085b670/export {"uuid": "3e76353d-aef8-4d55-a5d2-c0e04085b670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-14914", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvd3bmqwa2h", "content": "", "creation_timestamp": "2026-02-02T17:00:28.379865Z"} {"uuid": "3e76353d-aef8-4d55-a5d2-c0e04085b670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-14914", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvd3bmqwa2h", "content": "", "creation_timestamp": "2026-02-02T17:00:28.379865Z"} https://db.gcve.eu/sighting/3e76353d-aef8-4d55-a5d2-c0e04085b670/export Mon, 02 Feb 2026 17:00:28 +0000 https://db.gcve.eu/sighting/fd5b5824-a9a7-475e-8a1f-8a9b7546e69b/export {"uuid": "fd5b5824-a9a7-475e-8a1f-8a9b7546e69b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-14914", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3meqri7iqpx22", "content": "", "creation_timestamp": "2026-02-13T15:00:07.746417Z"} {"uuid": "fd5b5824-a9a7-475e-8a1f-8a9b7546e69b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-14914", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3meqri7iqpx22", "content": "", "creation_timestamp": "2026-02-13T15:00:07.746417Z"} https://db.gcve.eu/sighting/fd5b5824-a9a7-475e-8a1f-8a9b7546e69b/export Fri, 13 Feb 2026 15:00:07 +0000 https://db.gcve.eu/sighting/9e2e87e5-88c6-43bc-bd01-2aad1a2301ec/export {"uuid": "9e2e87e5-88c6-43bc-bd01-2aad1a2301ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-14915", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3mhsr5mmujp2c", "content": "", "creation_timestamp": "2026-03-24T14:15:07.062121Z"} {"uuid": "9e2e87e5-88c6-43bc-bd01-2aad1a2301ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-14915", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3mhsr5mmujp2c", "content": "", "creation_timestamp": "2026-03-24T14:15:07.062121Z"} https://db.gcve.eu/sighting/9e2e87e5-88c6-43bc-bd01-2aad1a2301ec/export Tue, 24 Mar 2026 14:15:07 +0000 https://db.gcve.eu/sighting/0c3abd98-cab1-4bc7-bc2c-6d02fbf19023/export {"uuid": "0c3abd98-cab1-4bc7-bc2c-6d02fbf19023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-14915", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3mhsyxw6sij2l", "content": "", "creation_timestamp": "2026-03-24T16:35:05.087113Z"} {"uuid": "0c3abd98-cab1-4bc7-bc2c-6d02fbf19023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-14915", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3mhsyxw6sij2l", "content": "", "creation_timestamp": "2026-03-24T16:35:05.087113Z"} https://db.gcve.eu/sighting/0c3abd98-cab1-4bc7-bc2c-6d02fbf19023/export Tue, 24 Mar 2026 16:35:05 +0000