RedPacket Security - InfoSec News & Tutorials

CVE Alert: CVE-2024-13321

March 15, 2025

Vulnerability Summary: CVE-2024-13321 The AnalyticsWP plugin for WordPress is vulnerable to SQL Injection via the 'custom_sql' parameter in all versions...

CVE Alert: CVE-2025-1526

March 15, 2025

Vulnerability Summary: CVE-2025-1526 The DethemeKit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the De Product...

CVE Alert: CVE-2025-2221

March 15, 2025

Vulnerability Summary: CVE-2025-2221 The WPCOM Member plugin for WordPress is vulnerable to time-based SQL Injection via the ‘user_phone’ parameter in...

CVE Alert: CVE-2025-1507

March 15, 2025

Vulnerability Summary: CVE-2025-1507 The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due...

CVE Alert: CVE-2024-13772

March 15, 2025

Vulnerability Summary: CVE-2024-13772 The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication...

CVE Alert: CVE-2024-8176

March 15, 2025

Vulnerability Summary: CVE-2024-8176 A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity...

CVE Alert: CVE-2024-26006

March 15, 2025

Vulnerability Summary: CVE-2024-26006 An improper neutralization of input during web page Generation vulnerability in FortiOS version 7.4.3 and below, version...

CVE Alert: CVE-2024-13771

March 15, 2025

Vulnerability Summary: CVE-2024-13771 The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication...

CVE Alert: CVE-2024-12810

March 15, 2025

Vulnerability Summary: CVE-2024-12810 The JobCareer | Job Board Responsive WordPress Theme theme for WordPress is vulnerable to unauthorized access, modification,...

CVE Alert: CVE-2025-2000

March 15, 2025

Vulnerability Summary: CVE-2025-2000 A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege escalation when...

CVE Alert: CVE-2025-27595

March 15, 2025

Vulnerability Summary: CVE-2025-27595 The device uses a weak hashing alghorithm to create the password hash. Hence, a matching password can...

CVE Alert: CVE-2024-13773

March 15, 2025

Vulnerability Summary: CVE-2024-13773 The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive...

CVE Alert: CVE-2025-2232

March 15, 2025

Vulnerability Summary: CVE-2025-2232 The Realteo - Real Estate Plugin by Purethemes plugin for WordPress, used by the Findeo Theme, is...

CVE Alert: CVE-2025-27594

March 15, 2025

Vulnerability Summary: CVE-2025-27594 The device uses an unencrypted, proprietary protocol for communication. Through this protocol, configuration data is transmitted and...