{"vulnerability": "CVE-2024-4925", "sightings": [{"uuid": "6dcaafe8-0e0e-48fb-b126-3540d8afb7c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49256", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mij3l36hsx2f", "content": "", "creation_timestamp": "2026-04-02T11:20:09.618695Z"}, {"uuid": "e8e0e1fb-fdee-496f-acbf-a1bc7a34effa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49250", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mikthdug2a2i", "content": "", "creation_timestamp": "2026-04-03T04:00:13.914750Z"}, {"uuid": "2bc83924-5e1e-4986-9ed2-79fd3a39be82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49256", "type": "seen", "source": "https://t.me/cvedetector/9586", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49256 - WPChill Htaccess File Editor Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-49256 \nPublished : Nov. 1, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in WPChill Htaccess File Editor allows Accessing Functionality Not Properly Constrained by ACLs.  \n  \nThis issue affects Htaccess File Editor: from n/a through 1.0.18. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:01:01.000000Z"}, {"uuid": "4ce2a145-2b3e-4077-b3f6-d0fa16e7833e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49252", "type": "seen", "source": "https://t.me/cvedetector/8072", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49252 - Leyka Teplitsa Exposure of Sensitive Information Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-49252 \nPublished : Oct. 16, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Teplitsa of social technologies Leyka.This issue affects Leyka: from n/a through 3.31.6. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T17:13:22.000000Z"}, {"uuid": "fb843e25-e013-4f0e-a78d-5774a89fdfab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49251", "type": "seen", "source": "https://t.me/cvedetector/8071", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49251 - \"Maan Addons For Elementor PHP Remote File Inclusion\"\", \n  \"Content\": \"CVE ID : CVE-2024-49251 \nPublished : Oct. 16, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Maantheme Maan Addons For Elementor allows Local Code Inclusion.This issue affects Maan Addons For Elementor: from n/a through 1.0.1. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T17:13:21.000000Z"}, {"uuid": "c763d6d0-f8fd-478a-b346-0bdeff581076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49258", "type": "seen", "source": "https://t.me/cvedetector/8068", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49258 - Path Traversal: '.../...//' vulnerability in Limb\", \n  \"Content\": \"CVE ID : CVE-2024-49258 \nPublished : Oct. 16, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : Path Traversal: '.../...//' vulnerability in Limb WordPress Gallery Plugin \u2013 Limb Image Gallery.This issue affects WordPress Gallery Plugin \u2013 Limb Image Gallery: from n/a through 1.5.7. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T17:13:16.000000Z"}, {"uuid": "4730f6a6-6b59-43d1-be03-121311854cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49254", "type": "seen", "source": "https://t.me/cvedetector/8067", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49254 - Sunjianle Ajax-Extend Code Injection\", \n  \"Content\": \"CVE ID : CVE-2024-49254 \nPublished : Oct. 16, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : Improper Control of Generation of Code ('Code Injection') vulnerability in Sunjianle allows Code Injection.This issue affects ajax-extend: from n/a through 1.0. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T17:13:15.000000Z"}, {"uuid": "12f1334d-e936-481f-abfa-10f2d79e7792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49257", "type": "seen", "source": "https://t.me/cvedetector/8054", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49257 - \"Denis Azz Anonim Posting File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-49257 \nPublished : Oct. 16, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in Denis Azz Anonim Posting allows Upload a Web Shell to a Web Server.This issue affects Azz Anonim Posting: from n/a through 0.9. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T16:22:50.000000Z"}, {"uuid": "8202737a-0f8e-4a88-bc09-76f94fece9a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49255", "type": "seen", "source": "https://t.me/cvedetector/8254", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49255 - \"Daniele Alessandra Da Reactions XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-49255 \nPublished : Oct. 17, 2024, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Daniele Alessandra Da Reactions allows Stored XSS.This issue affects Da Reactions: from n/a through 5.1.5. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-17T23:20:53.000000Z"}, {"uuid": "a8129b79-b85f-42d1-873d-8611d3352d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49259", "type": "seen", "source": "https://t.me/cvedetector/8252", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49259 - NicheAddons Primary Addon for Elementor Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-49259 \nPublished : Oct. 17, 2024, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in NicheAddons Primary Addon for Elementor allows Stored XSS.This issue affects Primary Addon for Elementor: from n/a through 1.5.8. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-17T23:20:51.000000Z"}, {"uuid": "dc8e7963-3a27-4178-97da-c0512b2cef3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49250", "type": "seen", "source": "https://t.me/cvedetector/8438", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49250 - Table of Contents Plus CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-49250 \nPublished : Oct. 20, 2024, 11:15 a.m. | 44\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Michael Tran Table of Contents Plus allows Cross Site Request Forgery.This issue affects Table of Contents Plus: from n/a through 2408. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-20T14:05:14.000000Z"}, {"uuid": "c9f63162-6589-47f1-b2dd-e18c60611511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49253", "type": "seen", "source": "https://t.me/cvedetector/8073", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49253 - James Park Analyse Uploads Relative Path Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-49253 \nPublished : Oct. 16, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : Relative Path Traversal vulnerability in James Park Analyse Uploads allows Relative Path Traversal.This issue affects Analyse Uploads: from n/a through 0.5. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T17:13:23.000000Z"}, {"uuid": "7ccc95a6-969c-4e5c-a2ef-0ef4f4661753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4925", "type": "seen", "source": "Telegram/WPdJkQJ5bzmqRqXSjZXAUVkiI6svUP8ogSH87ANBm2e_BwyZ", "content": "", "creation_timestamp": "2025-02-14T09:46:58.000000Z"}]}