<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 01 May 2026 23:09:55 +0000</lastBuildDate>
    <item>
      <title>71c3aaf9-3085-444e-8e7b-b7ca049f5254</title>
      <link>https://db.gcve.eu/sighting/71c3aaf9-3085-444e-8e7b-b7ca049f5254/export</link>
      <description>{"uuid": "71c3aaf9-3085-444e-8e7b-b7ca049f5254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25601", "type": "seen", "source": "https://t.me/cibsecurity/38813", "content": "\u203c CVE-2022-25601 \u203c\n\nReflected Cross-Site Scripting (XSS) vulnerability affecting parameter &amp;amp;tab discovered in Contact Form X WordPress plugin (versions &amp;lt;= 2.4).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-11T20:15:20.000000Z"}</description>
      <content:encoded>{"uuid": "71c3aaf9-3085-444e-8e7b-b7ca049f5254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25601", "type": "seen", "source": "https://t.me/cibsecurity/38813", "content": "\u203c CVE-2022-25601 \u203c\n\nReflected Cross-Site Scripting (XSS) vulnerability affecting parameter &amp;amp;tab discovered in Contact Form X WordPress plugin (versions &amp;lt;= 2.4).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-11T20:15:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/71c3aaf9-3085-444e-8e7b-b7ca049f5254/export</guid>
      <pubDate>Fri, 11 Mar 2022 20:15:20 +0000</pubDate>
    </item>
    <item>
      <title>62be428b-41cf-453a-9462-b85fd4983656</title>
      <link>https://db.gcve.eu/sighting/62be428b-41cf-453a-9462-b85fd4983656/export</link>
      <description>{"uuid": "62be428b-41cf-453a-9462-b85fd4983656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25600", "type": "seen", "source": "https://t.me/cibsecurity/38820", "content": "\u203c CVE-2022-25600 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin (versions &amp;lt;= 4.2.3).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-11T20:21:00.000000Z"}</description>
      <content:encoded>{"uuid": "62be428b-41cf-453a-9462-b85fd4983656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25600", "type": "seen", "source": "https://t.me/cibsecurity/38820", "content": "\u203c CVE-2022-25600 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin (versions &amp;lt;= 4.2.3).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-11T20:21:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/62be428b-41cf-453a-9462-b85fd4983656/export</guid>
      <pubDate>Fri, 11 Mar 2022 20:21:00 +0000</pubDate>
    </item>
    <item>
      <title>fe526d6f-b7d2-481c-aa42-718e7fb5efe0</title>
      <link>https://db.gcve.eu/sighting/fe526d6f-b7d2-481c-aa42-718e7fb5efe0/export</link>
      <description>{"uuid": "fe526d6f-b7d2-481c-aa42-718e7fb5efe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25605", "type": "seen", "source": "https://t.me/cibsecurity/39221", "content": "\u203c CVE-2022-25605 \u203c\n\nMultiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions &amp;lt;= 1.68.6). Vvulnerable parameters &amp;amp;download_path, &amp;amp;download_path_url, &amp;amp;download_page_url.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T21:22:49.000000Z"}</description>
      <content:encoded>{"uuid": "fe526d6f-b7d2-481c-aa42-718e7fb5efe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25605", "type": "seen", "source": "https://t.me/cibsecurity/39221", "content": "\u203c CVE-2022-25605 \u203c\n\nMultiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions &amp;lt;= 1.68.6). Vvulnerable parameters &amp;amp;download_path, &amp;amp;download_path_url, &amp;amp;download_page_url.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T21:22:49.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/fe526d6f-b7d2-481c-aa42-718e7fb5efe0/export</guid>
      <pubDate>Fri, 18 Mar 2022 21:22:49 +0000</pubDate>
    </item>
    <item>
      <title>fe540b2e-92ed-49de-bff0-d8f6938f14e8</title>
      <link>https://db.gcve.eu/sighting/fe540b2e-92ed-49de-bff0-d8f6938f14e8/export</link>
      <description>{"uuid": "fe540b2e-92ed-49de-bff0-d8f6938f14e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25603", "type": "seen", "source": "https://t.me/cibsecurity/39226", "content": "\u203c CVE-2022-25603 \u203c\n\nAuthenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in MaxGalleria WordPress plugin (versions 6.2.5).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T21:22:56.000000Z"}</description>
      <content:encoded>{"uuid": "fe540b2e-92ed-49de-bff0-d8f6938f14e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25603", "type": "seen", "source": "https://t.me/cibsecurity/39226", "content": "\u203c CVE-2022-25603 \u203c\n\nAuthenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in MaxGalleria WordPress plugin (versions 6.2.5).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T21:22:56.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/fe540b2e-92ed-49de-bff0-d8f6938f14e8/export</guid>
      <pubDate>Fri, 18 Mar 2022 21:22:56 +0000</pubDate>
    </item>
    <item>
      <title>64271c9f-48f2-4b4b-a811-03357d7ab6d1</title>
      <link>https://db.gcve.eu/sighting/64271c9f-48f2-4b4b-a811-03357d7ab6d1/export</link>
      <description>{"uuid": "64271c9f-48f2-4b4b-a811-03357d7ab6d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25607", "type": "seen", "source": "https://t.me/cibsecurity/39237", "content": "\u203c CVE-2022-25607 \u203c\n\nAuthenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions &amp;lt;= 7.5.15.727).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T21:23:10.000000Z"}</description>
      <content:encoded>{"uuid": "64271c9f-48f2-4b4b-a811-03357d7ab6d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25607", "type": "seen", "source": "https://t.me/cibsecurity/39237", "content": "\u203c CVE-2022-25607 \u203c\n\nAuthenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions &amp;lt;= 7.5.15.727).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T21:23:10.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/64271c9f-48f2-4b4b-a811-03357d7ab6d1/export</guid>
      <pubDate>Fri, 18 Mar 2022 21:23:10 +0000</pubDate>
    </item>
    <item>
      <title>69a90115-5ce5-427a-9140-f98828f44609</title>
      <link>https://db.gcve.eu/sighting/69a90115-5ce5-427a-9140-f98828f44609/export</link>
      <description>{"uuid": "69a90115-5ce5-427a-9140-f98828f44609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25609", "type": "seen", "source": "https://t.me/cibsecurity/39450", "content": "\u203c CVE-2022-25609 \u203c\n\nStored Cross-Site Scripting (XSS) in Yoo Slider \u00e2\u20ac\u201c Image Slider &amp;amp; Video Slider (WordPress plugin) allows attackers with contributor or higher user role to inject the malicious code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-23T23:29:08.000000Z"}</description>
      <content:encoded>{"uuid": "69a90115-5ce5-427a-9140-f98828f44609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25609", "type": "seen", "source": "https://t.me/cibsecurity/39450", "content": "\u203c CVE-2022-25609 \u203c\n\nStored Cross-Site Scripting (XSS) in Yoo Slider \u00e2\u20ac\u201c Image Slider &amp;amp; Video Slider (WordPress plugin) allows attackers with contributor or higher user role to inject the malicious code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-23T23:29:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/69a90115-5ce5-427a-9140-f98828f44609/export</guid>
      <pubDate>Wed, 23 Mar 2022 23:29:08 +0000</pubDate>
    </item>
    <item>
      <title>2e8f0709-e7a4-493b-8057-dc852253a707</title>
      <link>https://db.gcve.eu/sighting/2e8f0709-e7a4-493b-8057-dc852253a707/export</link>
      <description>{"uuid": "2e8f0709-e7a4-493b-8057-dc852253a707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25608", "type": "seen", "source": "https://t.me/cibsecurity/39454", "content": "\u203c CVE-2022-25608 \u203c\n\nCross-Site Request Forgery (CSRF) in Yoo Slider \u00e2\u20ac\u201c Image Slider &amp;amp; Video Slider (WordPress plugin) allows attackers to trick authenticated users into unwanted slider duplicate or delete action.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-23T23:29:14.000000Z"}</description>
      <content:encoded>{"uuid": "2e8f0709-e7a4-493b-8057-dc852253a707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25608", "type": "seen", "source": "https://t.me/cibsecurity/39454", "content": "\u203c CVE-2022-25608 \u203c\n\nCross-Site Request Forgery (CSRF) in Yoo Slider \u00e2\u20ac\u201c Image Slider &amp;amp; Video Slider (WordPress plugin) allows attackers to trick authenticated users into unwanted slider duplicate or delete action.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-23T23:29:14.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/2e8f0709-e7a4-493b-8057-dc852253a707/export</guid>
      <pubDate>Wed, 23 Mar 2022 23:29:14 +0000</pubDate>
    </item>
    <item>
      <title>2b35fee2-a683-45ec-84d1-da09d95626fc</title>
      <link>https://db.gcve.eu/sighting/2b35fee2-a683-45ec-84d1-da09d95626fc/export</link>
      <description>{"uuid": "2b35fee2-a683-45ec-84d1-da09d95626fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25606", "type": "seen", "source": "https://t.me/cibsecurity/39573", "content": "\u203c CVE-2022-25606 \u203c\n\nMultiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions &amp;lt;= 1.68.6). Vulnerable parameters &amp;amp;download_path, &amp;amp;download_path_url, &amp;amp;download_page_url, &amp;amp;download_categories.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-25T21:36:56.000000Z"}</description>
      <content:encoded>{"uuid": "2b35fee2-a683-45ec-84d1-da09d95626fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25606", "type": "seen", "source": "https://t.me/cibsecurity/39573", "content": "\u203c CVE-2022-25606 \u203c\n\nMultiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions &amp;lt;= 1.68.6). Vulnerable parameters &amp;amp;download_path, &amp;amp;download_path_url, &amp;amp;download_page_url, &amp;amp;download_categories.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-25T21:36:56.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/2b35fee2-a683-45ec-84d1-da09d95626fc/export</guid>
      <pubDate>Fri, 25 Mar 2022 21:36:56 +0000</pubDate>
    </item>
    <item>
      <title>a1066f4a-5feb-4316-bc6a-b3203bb64b94</title>
      <link>https://db.gcve.eu/sighting/a1066f4a-5feb-4316-bc6a-b3203bb64b94/export</link>
      <description>{"uuid": "a1066f4a-5feb-4316-bc6a-b3203bb64b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-2560", "type": "seen", "source": "Telegram/7r_e2U1FxnCa2kNQpvovquwMZPIMPrP98oj2hayY9MZGeSr0", "content": "", "creation_timestamp": "2025-02-18T21:11:32.000000Z"}</description>
      <content:encoded>{"uuid": "a1066f4a-5feb-4316-bc6a-b3203bb64b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-2560", "type": "seen", "source": "Telegram/7r_e2U1FxnCa2kNQpvovquwMZPIMPrP98oj2hayY9MZGeSr0", "content": "", "creation_timestamp": "2025-02-18T21:11:32.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/a1066f4a-5feb-4316-bc6a-b3203bb64b94/export</guid>
      <pubDate>Tue, 18 Feb 2025 21:11:32 +0000</pubDate>
    </item>
  </channel>
</rss>
