https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 10 Jul 2026 07:01:55 +0000 https://db.gcve.eu/sighting/dd858a2d-85dc-43ba-a381-f9df79309d9b/export {"uuid": "dd858a2d-85dc-43ba-a381-f9df79309d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2025-53251", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lwxwtdb3gh2v", "content": "", "creation_timestamp": "2025-08-22T07:31:45.492759Z"} {"uuid": "dd858a2d-85dc-43ba-a381-f9df79309d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2025-53251", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lwxwtdb3gh2v", "content": "", "creation_timestamp": "2025-08-22T07:31:45.492759Z"} https://db.gcve.eu/sighting/dd858a2d-85dc-43ba-a381-f9df79309d9b/export Fri, 22 Aug 2025 07:31:45 +0000 https://db.gcve.eu/sighting/7726eb54-5b0f-48c0-a0a9-b86caabf2b4e/export {"uuid": "7726eb54-5b0f-48c0-a0a9-b86caabf2b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53258", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19735", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-53258\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wow-Company Hover Effects allows SQL Injection. This issue affects Hover Effects: from n/a through 2.1.2.\n\ud83d\udccf Published: 2025-06-27T13:21:06.300Z\n\ud83d\udccf Modified: 2025-06-27T14:45:01.719Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/hover-effects/vulnerability/wordpress-hover-effects-plugin-2-1-2-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T14:51:42.000000Z"} {"uuid": "7726eb54-5b0f-48c0-a0a9-b86caabf2b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53258", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19735", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-53258\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wow-Company Hover Effects allows SQL Injection. This issue affects Hover Effects: from n/a through 2.1.2.\n\ud83d\udccf Published: 2025-06-27T13:21:06.300Z\n\ud83d\udccf Modified: 2025-06-27T14:45:01.719Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/hover-effects/vulnerability/wordpress-hover-effects-plugin-2-1-2-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T14:51:42.000000Z"} https://db.gcve.eu/sighting/7726eb54-5b0f-48c0-a0a9-b86caabf2b4e/export Fri, 27 Jun 2025 14:51:42 +0000 https://db.gcve.eu/sighting/0f196c5b-0bdc-4827-9ad2-7edb713800a0/export {"uuid": "0f196c5b-0bdc-4827-9ad2-7edb713800a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53257", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19734", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-53257\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Serhii Pasyuk Gmedia Photo Gallery allows PHP Local File Inclusion. This issue affects Gmedia Photo Gallery: from n/a through 1.23.0.\n\ud83d\udccf Published: 2025-06-27T13:21:05.659Z\n\ud83d\udccf Modified: 2025-06-27T14:45:15.780Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/grand-media/vulnerability/wordpress-gmedia-photo-gallery-plugin-1-23-0-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T14:51:38.000000Z"} {"uuid": "0f196c5b-0bdc-4827-9ad2-7edb713800a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53257", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19734", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-53257\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Serhii Pasyuk Gmedia Photo Gallery allows PHP Local File Inclusion. This issue affects Gmedia Photo Gallery: from n/a through 1.23.0.\n\ud83d\udccf Published: 2025-06-27T13:21:05.659Z\n\ud83d\udccf Modified: 2025-06-27T14:45:15.780Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/grand-media/vulnerability/wordpress-gmedia-photo-gallery-plugin-1-23-0-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T14:51:38.000000Z"} https://db.gcve.eu/sighting/0f196c5b-0bdc-4827-9ad2-7edb713800a0/export Fri, 27 Jun 2025 14:51:38 +0000 https://db.gcve.eu/sighting/227a4674-bd32-41d2-9192-dc16d6d06edf/export {"uuid": "227a4674-bd32-41d2-9192-dc16d6d06edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53256", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19733", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-53256\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YaySMTP allows SQL Injection. This issue affects YaySMTP: from n/a through 6.8.1.\n\ud83d\udccf Published: 2025-06-27T13:21:05.082Z\n\ud83d\udccf Modified: 2025-06-27T14:45:33.941Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/yaysmtp/vulnerability/wordpress-yaysmtp-plugin-6-8-1-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T14:51:37.000000Z"} {"uuid": "227a4674-bd32-41d2-9192-dc16d6d06edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53256", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19733", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-53256\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YaySMTP allows SQL Injection. This issue affects YaySMTP: from n/a through 6.8.1.\n\ud83d\udccf Published: 2025-06-27T13:21:05.082Z\n\ud83d\udccf Modified: 2025-06-27T14:45:33.941Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/yaysmtp/vulnerability/wordpress-yaysmtp-plugin-6-8-1-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T14:51:37.000000Z"} https://db.gcve.eu/sighting/227a4674-bd32-41d2-9192-dc16d6d06edf/export Fri, 27 Jun 2025 14:51:37 +0000 https://db.gcve.eu/sighting/b39fa6fd-388b-4012-9727-00aeb7577a96/export {"uuid": "b39fa6fd-388b-4012-9727-00aeb7577a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53255", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19732", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-53255\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Missing Authorization vulnerability in Nabil Lemsieh HurryTimer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HurryTimer: from n/a through 2.13.1.\n\ud83d\udccf Published: 2025-06-27T13:21:04.473Z\n\ud83d\udccf Modified: 2025-06-27T14:45:39.916Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/hurrytimer/vulnerability/wordpress-hurrytimer-plugin-2-13-1-broken-access-control-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T14:51:36.000000Z"} {"uuid": "b39fa6fd-388b-4012-9727-00aeb7577a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53255", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19732", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-53255\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Missing Authorization vulnerability in Nabil Lemsieh HurryTimer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HurryTimer: from n/a through 2.13.1.\n\ud83d\udccf Published: 2025-06-27T13:21:04.473Z\n\ud83d\udccf Modified: 2025-06-27T14:45:39.916Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/hurrytimer/vulnerability/wordpress-hurrytimer-plugin-2-13-1-broken-access-control-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T14:51:36.000000Z"} https://db.gcve.eu/sighting/b39fa6fd-388b-4012-9727-00aeb7577a96/export Fri, 27 Jun 2025 14:51:36 +0000 https://db.gcve.eu/sighting/a5d65f4e-783f-4860-965d-16754b88558d/export {"uuid": "a5d65f4e-783f-4860-965d-16754b88558d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53254", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19731", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-53254\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in webcraftic Cyrlitera allows Cross Site Request Forgery. This issue affects Cyrlitera: from n/a through 1.2.0.\n\ud83d\udccf Published: 2025-06-27T13:21:03.851Z\n\ud83d\udccf Modified: 2025-06-27T14:45:55.443Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/cyrlitera/vulnerability/wordpress-cyrlitera-plugin-1-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T14:51:36.000000Z"} {"uuid": "a5d65f4e-783f-4860-965d-16754b88558d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53254", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19731", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-53254\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in webcraftic Cyrlitera allows Cross Site Request Forgery. This issue affects Cyrlitera: from n/a through 1.2.0.\n\ud83d\udccf Published: 2025-06-27T13:21:03.851Z\n\ud83d\udccf Modified: 2025-06-27T14:45:55.443Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/cyrlitera/vulnerability/wordpress-cyrlitera-plugin-1-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T14:51:36.000000Z"} https://db.gcve.eu/sighting/a5d65f4e-783f-4860-965d-16754b88558d/export Fri, 27 Jun 2025 14:51:36 +0000 https://db.gcve.eu/sighting/74431ba0-ebf1-4a5c-8dc7-ef46d9da8bbf/export {"uuid": "74431ba0-ebf1-4a5c-8dc7-ef46d9da8bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53253", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19730", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-53253\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh WP Edit allows Stored XSS. This issue affects WP Edit: from n/a through 4.0.4.\n\ud83d\udccf Published: 2025-06-27T13:21:03.246Z\n\ud83d\udccf Modified: 2025-06-27T14:46:03.384Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-edit/vulnerability/wordpress-wp-edit-plugin-4-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T14:51:35.000000Z"} {"uuid": "74431ba0-ebf1-4a5c-8dc7-ef46d9da8bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53253", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19730", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-53253\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh WP Edit allows Stored XSS. This issue affects WP Edit: from n/a through 4.0.4.\n\ud83d\udccf Published: 2025-06-27T13:21:03.246Z\n\ud83d\udccf Modified: 2025-06-27T14:46:03.384Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-edit/vulnerability/wordpress-wp-edit-plugin-4-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T14:51:35.000000Z"} https://db.gcve.eu/sighting/74431ba0-ebf1-4a5c-8dc7-ef46d9da8bbf/export Fri, 27 Jun 2025 14:51:35 +0000 https://db.gcve.eu/sighting/98f2d38c-717d-43af-a735-32b968856e8a/export {"uuid": "98f2d38c-717d-43af-a735-32b968856e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-5325", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdjkwuzvj52", "content": "", "creation_timestamp": "2025-05-29T20:11:34.982761Z"} {"uuid": "98f2d38c-717d-43af-a735-32b968856e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-5325", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdjkwuzvj52", "content": "", "creation_timestamp": "2025-05-29T20:11:34.982761Z"} https://db.gcve.eu/sighting/98f2d38c-717d-43af-a735-32b968856e8a/export Thu, 29 May 2025 20:11:34 +0000