{"vulnerability": "cve-2021-2425", "sightings": [{"uuid": "3e1ac4cf-aea9-4fac-8ca1-c8ce8b9e5b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24258", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3300", "content": "#exploit\nWordPress vulnerabilities:\n\n1. CVE-2021-24258:\nElements Kit Lite/Elements Kit Pro WordPress Plugins <2.2.0 have a number of widgets that are vulnerable to stored XSS by lower-privileged users such as contributors, all via a similar method\nhttps://github.com/GoogleProjectZer0/CVE-2021-24258\n\n2. PoC script to exploit CVE-2021-24276:\nhttps://github.com/GoogleProjectZer0/CVE-2021-24276", "creation_timestamp": "2021-12-07T03:34:20.000000Z"}, {"uuid": "f2008775-ddbd-4d16-9095-507b5b65804f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24258", "type": "seen", "source": "https://t.me/cissp/3138", "content": "WordPress vulnerabilities:\ud83d\ude01\nCVE-2021-24258 - Elements Kit Lite/Elements Kit Pro WordPress Plugins <2.2.0 have a number of widgets that are vulnerable to stored XSS by lower-privileged users such as contributors, all via a similar method\nhttps://github.com/GoogleProjectZer0/CVE-2021-24258\n+ PoC script to exploit CVE-2021-24276\nhttps://github.com/GoogleProjectZer0/CVE-2021-24276\n\nThreat Research:\n1. Privilege Escalation Via a Use After Free Vulnerability\nIn win32k (PoC for CVE-2021-26900, CVE-2020-1381)\nhttps://www.zerodayinitiative.com/blog/2021/5/3/cve-2021-26900-privilege-escalation-via-a-use-after-free-vulnerability-in-win32k\n2. The authentication bypass flaw affects HPE Edgeline Infrastructure Manager (EIM) ver.1.21\nhttps://securityaffairs.co/wordpress/117513/security/hpe-edgeline-infrastructure-manager-flaw.html?utm_source=feedly&utm_medium=rss&utm_campaign=hpe-edgeline-infrastructure-manager-flaw\n\nA Simple Android Remote Administration Tool Using Sockets. It uses java on the client side and python on the server side\nhttps://github.com/karma9874/AndroRAT", "creation_timestamp": "2026-09-01T17:00:50.911955Z"}, {"uuid": "5a6ddba8-95f2-4f68-8a92-04fb3dc903b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24258", "type": "seen", "source": "https://t.me/cissp/3138", "content": "WordPress vulnerabilities:\ud83d\ude01\nCVE-2021-24258 - Elements Kit Lite/Elements Kit Pro WordPress Plugins <2.2.0 have a number of widgets that are vulnerable to stored XSS by lower-privileged users such as contributors, all via a similar method\nhttps://github.com/GoogleProjectZer0/CVE-2021-24258\n+ PoC script to exploit CVE-2021-24276\nhttps://github.com/GoogleProjectZer0/CVE-2021-24276\n\nThreat Research:\n1. Privilege Escalation Via a Use After Free Vulnerability\nIn win32k (PoC for CVE-2021-26900, CVE-2020-1381)\nhttps://www.zerodayinitiative.com/blog/2021/5/3/cve-2021-26900-privilege-escalation-via-a-use-after-free-vulnerability-in-win32k\n2. The authentication bypass flaw affects HPE Edgeline Infrastructure Manager (EIM) ver.1.21\nhttps://securityaffairs.co/wordpress/117513/security/hpe-edgeline-infrastructure-manager-flaw.html?utm_source=feedly&utm_medium=rss&utm_campaign=hpe-edgeline-infrastructure-manager-flaw\n\nA Simple Android Remote Administration Tool Using Sockets. It uses java on the client side and python on the server side\nhttps://github.com/karma9874/AndroRAT", "creation_timestamp": "2026-09-02T01:04:39.975815Z"}]}