Tag: 2025-03-01

1 Attack Reports | 46 Vulnerabilities

Attack reports

Astrill VPN: New IPs Publicly Released on VPN Service Heavily Used by North Korean Threat Actors

North Korean threat actors, particularly from the Lazarus Group, continue to utilize Astrill VPN to conceal their IP addresses during attacks. Recent infrastructure and logs from the 'Contagious Interview' subgroup confirmed ongoing use of Astrill VPN in their operations. Google's Mandiant and Reco…
apt
north korea
contagious interview
2025-03-01
astrill vpn
famous chollima
Published: March 1, 2025
Downloadable IOCs: 9
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-27554

9.9
    ToDesktop
  • Version(s): before 2024-10-03
    Cursor
  • Version(s): before 2024-10-03
Published: March 1, 2025

CVE-2024-12824

9.8
    Nokri – Job Board WordPress Theme
  • Version(s): up to 1.6.2
Published: March 1, 2025

CVE-2025-1564

9.8
    SetSail Membership plugin for WordPress
  • Version(s): up to 1.0.3
Published: March 1, 2025

CVE-2025-1638

9.8
    Alloggio Membership plugin for WordPress
  • Version(s): up to 1.0.2
Published: March 1, 2025

CVE-2025-1671

9.8
    Academist Membership plugin for WordPress
  • Version(s): up to 1.1.6
Published: March 1, 2025

CVE-2025-23116

9.6
    UniFi Protect
Published: March 1, 2025

CVE-2025-23115

9.0
    UniFi Protect Cameras
Published: March 1, 2025

CVE-2024-12544

8.8
    SurveyJS: Drag & Drop WordPress Form Builder plugin
  • Version(s): up to 1.12.17
Published: March 1, 2025

CVE-2024-13373

8.1
    Exertio Framework plugin for WordPress
  • Version(s): up to 1.3.1
Published: March 1, 2025

CVE-2025-23119

7.5
    UniFi Protect Cameras
Published: March 1, 2025

CVE-2024-13568

7.5
    Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress
  • Version(s): up to 1.8.5
Published: March 1, 2025

CVE-2024-13611

7.5
    Better Messages - Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress
  • Version(s): up to 2.6.9
Published: March 1, 2025

CVE-2024-13911

7.2
    WordPress Database Backup plugin
  • Version(s): up to 2.35
Published: March 1, 2025

CVE-2024-13910

7.2
    Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress
  • Version(s): up to 2.35
Published: March 1, 2025

CVE-2024-13833

7.2
    Album Gallery - WordPress Gallery plugin
  • Version(s): up to 1.6.3
Published: March 1, 2025

CVE-2025-1804

7.0
    Blizzard Battle.Net
  • Version(s): up to 2.39.0.15212
Published: March 1, 2025

CVE-2025-23117

6.8
    UniFi Protect Cameras
Published: March 1, 2025

CVE-2024-13746

6.5
    WordPress Booking Calendar and Notification plugin
  • Version(s): up to 4.0.3
Published: March 1, 2025

CVE-2024-13750

6.5
    Multilevel Referral Affiliate Plugin for WooCommerce plugin for WordPress
  • Version(s): up to 2.27
Published: March 1, 2025

CVE-2025-1730

6.5
    Simple Download Counter plugin for WordPress
  • Version(s): up to 2.0
Published: March 1, 2025

CVE-2024-13806

6.5
    WordPress Authors List plugin
  • Version(s): up to 2.0.6
Published: March 1, 2025

CVE-2025-23118

6.4
    UniFi Protect Cameras
Published: March 1, 2025

CVE-2024-13559

6.4
    TemplatesNext ToolKit plugin for WordPress
  • Version(s): up to 3.2.9
Published: March 1, 2025

CVE-2025-0820

6.4
    Clicface Trombi plugin for WordPress
  • Version(s): up to 2.08
Published: March 1, 2025

CVE-2025-1459

6.4
    Page Builder by SiteOrigin plugin for WordPress
  • Version(s): up to 2.31.4
Published: March 1, 2025

CVE-2025-1291

6.4
    Gutenberg Blocks with AI by Kadence WP - Page Builder Features
  • Version(s): 2.0.0 - 3.4.9
Published: March 1, 2025

CVE-2025-1491

6.4
    WP Posts Carousel plugin for WordPress
  • Version(s): up to 1.3.7
Published: March 1, 2025

CVE-2025-1791

6.3
    Zorlan SkyCaiji
  • Version(s): 2.9
Published: March 1, 2025

CVE-2025-1797

6.3
    Hunan Zhonghe Baiyi Information Technology Baiyiyun Asset Management and Operations System
  • Version(s): up to 20250217
Published: March 1, 2025

CVE-2025-1799

6.3
    Zorlan SkyCaiji
  • Version(s): 2.9
Published: March 1, 2025

CVE-2025-1800

6.3
    D-Link DAR-7000
  • Version(s): 3.2
Published: March 1, 2025

CVE-2024-9212

6.1
    WooCommerce plugin for WordPress
  • Version(s): up to 1.6.2
Published: March 1, 2025

CVE-2024-9217

6.1
    Currency Switcher for WooCommerce plugin for WordPress
  • Version(s): up to 2.16.2
Published: March 1, 2025

CVE-2025-1502

5.3
    IP2Location Redirection plugin for WordPress
  • Version(s): up to 1.33.3
Published: March 1, 2025

CVE-2025-1786

5.3
    rizin
  • Version(s): up to 0.7.4
Published: March 1, 2025

CVE-2025-1404

5.3
    Secure Copy Content Protection and Content Locking plugin for WordPress
  • Version(s): up to 4.4.7
Published: March 1, 2025

CVE-2025-1788

5.3
    rizin
  • Version(s): up to 0.8.0
Published: March 1, 2025

CVE-2024-41778

5.3
    IBM Controller
  • Version(s): 11.0.0, 11.0.1, 11.1.0
Published: March 1, 2025

CVE-2024-13697

4.8
    Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress
  • Version(s): up to 2.7.4
Published: March 1, 2025

CVE-2024-13901

4.4
    The Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site plugin
  • Version(s): up to 2.0.6
Published: March 1, 2025

CVE-2024-13358

4.3
    BuddyPress WooCommerce My Account Integration
  • Version(s): up to 3.4.24
Published: March 1, 2025

CVE-2025-1780

4.3
    BuddyPress WooCommerce My Account Integration
  • Version(s): 1.0 - 3.4.25
Published: March 1, 2025

CVE-2024-13518

4.3
    Simple:Press Forum plugin for WordPress
  • Version(s): up to 6.10.11
Published: March 1, 2025

CVE-2024-13546

4.3
    GenerateBlocks plugin for WordPress
  • Version(s): up to 1.9.1
Published: March 1, 2025

CVE-2025-1803

None
    UNKNOWN
Published: March 1, 2025

CVE-2025-27416

None
    UNKNOWN
Published: March 1, 2025
Click here to see more Vulnerabilities