{"vulnerability": "CVE-2025-2394", "sightings": [{"uuid": "04459f1e-8de0-424c-b207-556f35d37228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23941", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfvb467yyv2g", "content": "", "creation_timestamp": "2025-01-16T21:49:22.603949Z"}, {"uuid": "33ed1d76-f6c2-4a35-85b1-a31e056d36a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23943", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7jbnycg2n", "content": "", "creation_timestamp": "2025-01-16T21:20:53.930919Z"}, {"uuid": "9c2d48ff-85d0-4812-a77f-46d207f8e96e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23946", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7je7jug2e", "content": "", "creation_timestamp": "2025-01-16T21:20:56.548057Z"}, {"uuid": "227a23f5-2bf7-4bc5-b55f-2225fc91a467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23947", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7jgiqqo2t", "content": "", "creation_timestamp": "2025-01-16T21:20:58.965661Z"}, {"uuid": "09c37b60-d3d2-4fcb-9d25-0e89815d60c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23941", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7j735xw2p", "content": "", "creation_timestamp": "2025-01-16T21:20:51.417054Z"}, {"uuid": "7d759bc3-53fe-4fd8-8672-4d699cecd8e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23940", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfvb45kbmi2q", "content": "", "creation_timestamp": "2025-01-16T21:49:20.735618Z"}, {"uuid": "0a1ccddd-8953-4d88-a6c7-d7622f3caa26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23940", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7j4srvz2b", "content": "", "creation_timestamp": "2025-01-16T21:20:48.750906Z"}, {"uuid": "dbec780f-4231-4d83-add5-24b94127c740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgg3apvlew2z", "content": "", "creation_timestamp": "2025-01-23T14:19:48.813245Z"}, {"uuid": "03296264-3bff-46a4-af63-5013e618ea77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdoafvryg27", "content": "", "creation_timestamp": "2025-01-22T15:21:38.846875Z"}, {"uuid": "1bb849e6-a57d-4ac8-be51-286456cc4ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdoao5m742f", "content": "", "creation_timestamp": "2025-01-22T15:21:47.563955Z"}, {"uuid": "7d3fe784-5e4e-4050-8d77-01258e6aaa63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23944", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdoajcle72c", "content": "", "creation_timestamp": "2025-01-22T15:21:42.380678Z"}, {"uuid": "2dc57607-e7a5-49a9-923c-112d1de15f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23948", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdoallqep2p", "content": "", "creation_timestamp": "2025-01-22T15:21:45.088145Z"}, {"uuid": "82c61604-1de7-4070-9351-203f48a52914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113872795181985844", "content": "", "creation_timestamp": "2025-01-22T15:49:22.477670Z"}, {"uuid": "2241d3b7-570d-4145-b14a-7667d1f8dfcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23944", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113872795286831795", "content": "", "creation_timestamp": "2025-01-22T15:49:24.277801Z"}, {"uuid": "cc206c9b-e331-485f-ac6c-c2041c5310ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23948", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113872795345361036", "content": "", "creation_timestamp": "2025-01-22T15:49:24.911269Z"}, {"uuid": "636c69e1-e07f-4785-8484-c9b6886d684b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113872795409374014", "content": "", "creation_timestamp": "2025-01-22T15:49:26.359167Z"}, {"uuid": "bbeb12d2-0a30-479b-8a34-9ffc5797d012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgdpspr56v2g", "content": "", "creation_timestamp": "2025-01-22T15:49:48.805438Z"}, {"uuid": "936dcb99-b619-45d7-b32e-a707b605dc0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgdpsqbypp25", "content": "", "creation_timestamp": "2025-01-22T15:49:51.466342Z"}, {"uuid": "5d52a364-9acc-45be-b99e-e0c40e72ae65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23948", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgdpsqfcem2h", "content": "", "creation_timestamp": "2025-01-22T15:49:51.993448Z"}, {"uuid": "46f563d3-f620-420e-ba7e-acbe7d7b2a5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23944", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgdpsqlw3x25", "content": "", "creation_timestamp": "2025-01-22T15:49:53.074344Z"}, {"uuid": "56ba61e9-6a9a-4ef4-8456-0f0dcd56df46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgdpsqvvfd2k", "content": "", "creation_timestamp": "2025-01-22T15:49:54.637233Z"}, {"uuid": "fd6dbc7a-fa8f-490b-b1f9-ab19c90efd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23945", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"}, {"uuid": "825dd396-7952-4b98-b523-d8898cea1b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23943", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2204", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23943\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arul PDF.js Shortcode allows Stored XSS.This issue affects PDF.js Shortcode: from n/a through 1.0.\n\ud83d\udccf Published: 2025-01-16T20:08:06.661Z\n\ud83d\udccf Modified: 2025-01-17T20:28:48.373Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/pdfjs-shortcode/vulnerability/wordpress-pdf-js-shortcode-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-17T20:57:48.000000Z"}, {"uuid": "c8f0c23a-bf4e-42c1-9f4d-9821b8772627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23947", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2230", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23947\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M.J WP-Player allows Stored XSS.This issue affects WP-Player: from n/a through 2.6.1.\n\ud83d\udccf Published: 2025-01-16T20:08:04.140Z\n\ud83d\udccf Modified: 2025-01-17T21:07:21.449Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-player/vulnerability/wordpress-wp-player-plugin-2-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-17T21:57:06.000000Z"}, {"uuid": "3d2bb319-290b-4b62-9e52-15ba99a7ee1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23941", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2201", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23941\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meinturnierplan.de Team MeinTurnierplan.de Widget Viewer allows Stored XSS.This issue affects MeinTurnierplan.de Widget Viewer: from n/a through 1.1.\n\ud83d\udccf Published: 2025-01-16T20:08:05.397Z\n\ud83d\udccf Modified: 2025-01-17T20:31:06.564Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/meinturnierplande-widget-viewer/vulnerability/wordpress-meinturnierplan-de-widget-viewer-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-17T20:57:43.000000Z"}, {"uuid": "59427951-2748-4d0c-ac21-7c30c84f7727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2394", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17368", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2394\n\ud83d\udd25 CVSS Score: 4.7 (cvssV4_0, Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure.\n\ud83d\udccf Published: 2025-05-23T00:03:32.603Z\n\ud83d\udccf Modified: 2025-05-23T00:04:10.950Z\n\ud83d\udd17 References:\n1. https://www.themissinglink.com.au/security-advisories/cve-2025-2394\n2. https://www.ecovacs.com/global/userhelp/dsa20250507001", "creation_timestamp": "2025-05-23T00:44:03.000000Z"}, {"uuid": "c4a17631-1cf7-4e70-a95b-2e610e19f40e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23946", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2202", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23946\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in le Pixel Solitaire Enhanced YouTube Shortcode allows Stored XSS.This issue affects Enhanced YouTube Shortcode: from n/a through 2.0.1.\n\ud83d\udccf Published: 2025-01-16T20:08:06.007Z\n\ud83d\udccf Modified: 2025-01-17T20:29:42.159Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/enhanced-youtube-shortcode/vulnerability/wordpress-enhanced-youtube-shortcode-plugin-2-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-17T20:57:44.000000Z"}, {"uuid": "ad120d4f-23a2-408d-aba5-9531319833e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23940", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23940\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiem Khan Image Switcher allows Stored XSS.This issue affects Image Switcher: from n/a through 0.1.1.\n\ud83d\udccf Published: 2025-01-16T20:08:01.513Z\n\ud83d\udccf Modified: 2025-01-17T21:12:11.939Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/image-switcher/vulnerability/wordpress-jupdf-pdf-viewer-plugin-0-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-17T21:57:05.000000Z"}, {"uuid": "a689e699-359d-4353-bd58-25b146a6c88a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2564", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23949\n\ud83d\udd39 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mihajlovic Nenad Improved Sale Badges \u2013 Free Version allows PHP Local File Inclusion. This issue affects Improved Sale Badges \u2013 Free Version: from n/a through 1.0.1.\n\ud83d\udccf Published: 2025-01-22T14:29:24.700Z\n\ud83d\udccf Modified: 2025-01-22T15:24:32.432Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/improved-sale-badges-free-version/vulnerability/wordpress-improved-sale-badges-free-version-plugin-1-0-1-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-22T16:01:51.000000Z"}, {"uuid": "298d7357-276d-42cd-8e2a-12ead9f299f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23948", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2563", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23948\n\ud83d\udd39 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebArea Background animation blocks allows PHP Local File Inclusion. This issue affects Background animation blocks: from n/a through 2.1.5.\n\ud83d\udccf Published: 2025-01-22T14:29:24.502Z\n\ud83d\udccf Modified: 2025-01-22T15:24:58.850Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/background-animation-blocks/vulnerability/wordpress-background-animation-blocks-plugin-2-1-5-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-22T16:01:51.000000Z"}, {"uuid": "4b86086b-db16-4c9f-a69d-4facf6b8eff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23944", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2562", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23944\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in WOOEXIM.COM WOOEXIM allows Object Injection. This issue affects WOOEXIM: from n/a through 5.0.0.\n\ud83d\udccf Published: 2025-01-22T14:29:24.334Z\n\ud83d\udccf Modified: 2025-01-22T15:25:31.387Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wooexim/vulnerability/wordpress-wooexim-plugin-5-0-0-php-object-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-22T16:01:50.000000Z"}, {"uuid": "26ba051f-6a8f-4e07-bb6e-715d10009f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23946", "type": "seen", "source": "https://t.me/cvedetector/15644", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23946 - Le Pixel Solitaire Enhanced YouTube Shortcode XSS\", \n  \"Content\": \"CVE ID : CVE-2025-23946 \nPublished : Jan. 16, 2025, 9:15 p.m. | 39\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in le Pixel Solitaire Enhanced YouTube Shortcode allows Stored XSS.This issue affects Enhanced YouTube Shortcode: from n/a through 2.0.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T22:56:08.000000Z"}, {"uuid": "1cdd4325-b5dc-45fd-983b-c007a6e02ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23943", "type": "seen", "source": "https://t.me/cvedetector/15643", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23943 - Ardul PDF.js Cross-site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23943 \nPublished : Jan. 16, 2025, 9:15 p.m. | 39\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arul PDF.js Shortcode allows Stored XSS.This issue affects PDF.js Shortcode: from n/a through 1.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T22:56:08.000000Z"}, {"uuid": "e3df9a1a-90e3-4d6d-8976-cb5034cf8690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23947", "type": "seen", "source": "https://t.me/cvedetector/15645", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23947 - M.J WP-Player Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23947 \nPublished : Jan. 16, 2025, 9:15 p.m. | 39\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M.J WP-Player allows Stored XSS.This issue affects WP-Player: from n/a through 2.6.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T22:56:09.000000Z"}, {"uuid": "5421258e-009c-40d0-8080-1deeda783bc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23944", "type": "seen", "source": "https://t.me/cvedetector/16095", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23944 - WOOEXIM.COM WOOEXIM Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23944 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in WOOEXIM.COM WOOEXIM allows Object Injection. This issue affects WOOEXIM: from n/a through 5.0.0. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:28.000000Z"}, {"uuid": "a3c57bae-c1b7-41bb-85f8-ff0043af92cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://t.me/cvedetector/16097", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23949 - Mihajlovic Nenad Improved Sale Badges PHP Remote File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23949 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mihajlovic Nenad Improved Sale Badges \u2013 Free Version allows PHP Local File Inclusion. This issue affects Improved Sale Badges \u2013 Free Version: from n/a through 1.0.1. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:33.000000Z"}, {"uuid": "9773bc7c-72ad-4f8c-94e4-34efd566ac54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23948", "type": "seen", "source": "https://t.me/cvedetector/16096", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23948 - WebArea PHP Remote File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23948 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebArea Background animation blocks allows PHP Local File Inclusion. This issue affects Background animation blocks: from n/a through 2.1.5. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:29.000000Z"}, {"uuid": "bafada83-907b-444b-910e-3127504523de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "published-proof-of-concept", "source": "Telegram/RTL4c24ehL4PcIHiJWtbR38qnR2ShnHV1PtZpJt4LwM00pI", "content": "", "creation_timestamp": "2025-02-25T20:00:08.000000Z"}, {"uuid": "46f2186b-cd9d-4c21-ad44-bc8cb754b285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "published-proof-of-concept", "source": "Telegram/hOLG--AO3JPkph5SXhaEZPsqsMyW7qsjKUHXu0bcblbq2os", "content": "", "creation_timestamp": "2025-02-25T16:00:09.000000Z"}, {"uuid": "93b969cd-2be2-4442-83b6-e184aeccb39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23940", "type": "seen", "source": "https://t.me/cvedetector/15648", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23940 - Saiem Khan Image Switcher Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23940 \nPublished : Jan. 16, 2025, 9:15 p.m. | 39\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiem Khan Image Switcher allows Stored XSS.This issue affects Image Switcher: from n/a through 0.1.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T22:56:15.000000Z"}, {"uuid": "4a10b699-6f99-4339-956c-13b142bd7886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23941", "type": "seen", "source": "https://t.me/cvedetector/15649", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23941 - Meinturnierplan.de Widget Viewer Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23941 \nPublished : Jan. 16, 2025, 9:15 p.m. | 39\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meinturnierplan.de Team MeinTurnierplan.de Widget Viewer allows Stored XSS.This issue affects MeinTurnierplan.de Widget Viewer: from n/a through 1.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T22:56:15.000000Z"}, {"uuid": "e17e1475-0d18-449b-a156-7baa16020ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "seen", "source": "https://t.me/cvedetector/16094", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23942 - NgocCode WP Load Gallery Remote File Upload\", \n  \"Content\": \"CVE ID : CVE-2025-23942 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in NgocCode WP Load Gallery allows Upload a Web Shell to a Web Server. This issue affects WP Load Gallery: from n/a through 2.1.6. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:28.000000Z"}]}