Tag: 2025-03-07

1 Attack Reports | 114 Vulnerabilities

Attack reports

Cascading Redirects: Unmasking a Multi-Site JavaScript Malware Campaign

A recent investigation uncovered a malicious JavaScript injection affecting WordPress websites, redirecting visitors to unwanted third-party domains. The attack vector involves a two-stage redirection process, injecting code into theme files and loading external scripts. The malware creates hidden …
wordpress
javascript injection
2025-03-07
malicious redirects
traffic hijacking
theme file modification
two-stage attack
seo damage
Published: March 7, 2025
Downloadable IOCs: 3
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-1475

9.8
    WordPress WPCOM Member plugin
Published: March 7, 2025

CVE-2025-27816

9.8
    Arctera InfoScale
Published: March 7, 2025

CVE-2024-12876

9.8
    Golo - City Travel Guide WordPress Theme
Published: March 7, 2025

CVE-2025-1315

9.8
    InWave Jobs plugin for WordPress
Published: March 7, 2025

CVE-2024-42733

9.8
    Docmosis Tornado
Published: March 7, 2025

CVE-2025-27603

9.1
    XWiki Confluence Migrator Pro
Published: March 7, 2025

CVE-2025-1309

8.8
    UiPress lite plugin for WordPress
Published: March 7, 2025

CVE-2024-12035

8.8
    CS Framework plugin for WordPress
Published: March 7, 2025

CVE-2024-9658

8.8
    School Management System for Wordpress plugin
Published: March 7, 2025

CVE-2025-0959

8.8
    Eventer - WordPress Event & Booking Manager Plugin
Published: March 7, 2025

CVE-2025-27607

8.8
    Python JSON Logger
Published: March 7, 2025

CVE-2025-2097

8.8
    TOTOLINK EX1800T
Published: March 7, 2025

CVE-2025-0749

8.1
    Homey theme for WordPress
Published: March 7, 2025

CVE-2024-13655

8.1
    Flex Mag - Responsive WordPress News Theme
Published: March 7, 2025

CVE-2024-12837

7.8
    UNKNOWN
Published: March 7, 2025

CVE-2025-26331

7.8
    Dell ThinOS
Published: March 7, 2025

CVE-2025-2024

7.8
    Trimble SketchUp
Published: March 7, 2025

CVE-2024-13320

7.5
    CURCY - WooCommerce Multi Currency - Currency Switcher plugin for WordPress
Published: March 7, 2025

CVE-2024-10804

7.5
    Ultimate Video Player WordPress & WooCommerce Plugin
Published: March 7, 2025

CVE-2024-12036

7.5
    CS Framework plugin for WordPress
Published: March 7, 2025

CVE-2025-27604

7.5
    XWiki Confluence Migrator Pro
Published: March 7, 2025

CVE-2025-27822

7.5
    Backdrop CMS
Published: March 7, 2025

CVE-2025-2050

7.3
    PHPGurukul User Registration & Login and User Management System
Published: March 7, 2025

CVE-2025-2057

7.3
    PHPGurukul Emergency Ambulance Hiring Portal
Published: March 7, 2025

CVE-2025-2058

7.3
    PHPGurukul Emergency Ambulance Hiring Portal
Published: March 7, 2025

CVE-2025-2059

7.3
    PHPGurukul Emergency Ambulance Hiring Portal
Published: March 7, 2025

CVE-2025-2060

7.3
    PHPGurukul Emergency Ambulance Hiring Portal
Published: March 7, 2025

CVE-2025-2062

7.3
    projectworlds Life Insurance Management System
Published: March 7, 2025

CVE-2025-2063

7.3
    projectworlds Life Insurance Management System
Published: March 7, 2025

CVE-2025-2064

7.3
    projectworlds Life Insurance Management System
Published: March 7, 2025

CVE-2025-2065

7.3
    projectworlds Life Insurance Management System
Published: March 7, 2025

CVE-2025-2066

7.3
    projectworlds Life Insurance Management System
Published: March 7, 2025

CVE-2025-2067

7.3
    Life Insurance Management System
Published: March 7, 2025

CVE-2025-2088

7.3
    PHPGurukul Pre-School Enrollment System
Published: March 7, 2025

CVE-2024-13906

7.2
    Gallery by BestWebSoft plugin for WordPress
Published: March 7, 2025

CVE-2024-13668

7.1
    WordPress Activity O Meter plugin
Published: March 7, 2025

CVE-2024-53693

7.1
    QNAP QTS
    QNAP QuTS hero
Published: March 7, 2025

CVE-2025-0162

7.1
    IBM Aspera Shares
Published: March 7, 2025

CVE-2025-1121

6.8
    UNKNOWN
Published: March 7, 2025

CVE-2024-12607

6.5
    School Management System for Wordpress plugin for WordPress
Published: March 7, 2025

CVE-2024-12609

6.5
    School Management System for Wordpress plugin
Published: March 7, 2025

CVE-2024-13781

6.5
    Hero Maps Premium plugin for WordPress
Published: March 7, 2025

CVE-2025-1768

6.5
    WordPress SEO Plugin by Squirrly SEO
Published: March 7, 2025

CVE-2024-12809

6.4
    WordPress Wishlist plugin
Published: March 7, 2025

CVE-2025-0863

6.4
    Flexmls® IDX Plugin for WordPress
Published: March 7, 2025

CVE-2024-13805

6.4
    Advanced File Manager - Ultimate WordPress File Manager and Document Library Plugin
Published: March 7, 2025

CVE-2025-27823

6.4
    Backdrop CMS Mail Disguise module
Published: March 7, 2025

CVE-2025-27824

6.4
    Backdrop CMS
Published: March 7, 2025

CVE-2025-27825

6.4
    Backdrop CMS with Bootstrap 5 Lite theme
Published: March 7, 2025

CVE-2025-27826

6.4
    Backdrop CMS Bootstrap Lite theme
Published: March 7, 2025

CVE-2025-2051

6.3
    PHPGurukul Apartment Visitors Management System
Published: March 7, 2025

CVE-2025-2052

6.3
    PHPGurukul Apartment Visitors Management System
Published: March 7, 2025

CVE-2025-2053

6.3
    PHPGurukul Apartment Visitors Management System
Published: March 7, 2025

CVE-2025-2094

6.3
    TOTOLINK EX1800T
Published: March 7, 2025

CVE-2025-2095

6.3
    TOTOLINK EX1800T
Published: March 7, 2025

CVE-2025-2096

6.3
    TOTOLINK EX1800T
Published: March 7, 2025

CVE-2024-13431

6.1
    Appointment Booking Calendar - Simply Schedule Appointments Booking Plugin plugin for WordPress
Published: March 7, 2025

CVE-2024-12634

6.1
    Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress
Published: March 7, 2025

CVE-2024-12576

5.5
    UNKNOWN
Published: March 7, 2025

CVE-2024-13857

5.5
    WPGet API - Connect to any external REST API plugin for WordPress
Published: March 7, 2025

CVE-2024-50405

5.5
    QNAP QTS
    QNAP QuTS hero
Published: March 7, 2025

CVE-2025-2089

5.4
    StarSea99 starsea-mall
Published: March 7, 2025

CVE-2023-35894

5.4
    IBM Control Center
Published: March 7, 2025

CVE-2025-26643

5.4
    Microsoft Edge (Chromium-based)
Published: March 7, 2025

CVE-2024-12610

5.3
    School Management System for Wordpress plugin for WordPress
Published: March 7, 2025

CVE-2024-12611

5.3
    School Management System for Wordpress plugin
Published: March 7, 2025

CVE-2024-13904

5.3
    Platform.ly for WooCommerce plugin for WordPress
Published: March 7, 2025

CVE-2023-43052

5.3
    IBM Control Center
Published: March 7, 2025

CVE-2024-13086

5.3
    QTS
    QuTS hero
Published: March 7, 2025

CVE-2024-9458

4.8
    Reservit Hotel WordPress plugin
Published: March 7, 2025

CVE-2025-2054

4.7
    code-projects Blood Bank Management System
Published: March 7, 2025

CVE-2025-2090

4.7
    PHPGurukul Pre-School Enrollment System
Published: March 7, 2025

CVE-2024-53692

4.7
    QNAP QTS
    QNAP QuTS hero
Published: March 7, 2025

CVE-2025-27796

4.5
    GraphicsMagick
Published: March 7, 2025

CVE-2024-13526

4.3
    EventPrime - Events Calendar, Bookings and Tickets plugin for WordPress
Published: March 7, 2025

CVE-2025-0748

4.3
    Homey theme for WordPress
Published: March 7, 2025

CVE-2025-2061

4.3
    Online Ticket Reservation System
Published: March 7, 2025

CVE-2025-27795

4.3
    GraphicsMagick
Published: March 7, 2025

CVE-2024-13552

4.3
    SupportCandy - Helpdesk & Customer Support Ticket System plugin for WordPress
Published: March 7, 2025

CVE-2024-13635

4.3
    VK Blocks plugin for WordPress
Published: March 7, 2025

CVE-2025-25617

4.3
    Unifiedtransform
Published: March 7, 2025

CVE-2025-26708

4.2
    ZTELink
Published: March 7, 2025

CVE-2025-2084

3.5
    Phpgurukul
  • Human Metapneumovirus
Published: March 7, 2025

CVE-2025-2085

3.5
    StarSea99 starsea-mall
Published: March 7, 2025

CVE-2025-2086

3.5
    StarSea99 starsea-mall
Published: March 7, 2025

CVE-2025-2087

3.5
    StarSea99 starsea-mall
Published: March 7, 2025

CVE-2025-2093

3.1
    PHPGurukul Online Library Management System
Published: March 7, 2025

CVE-2025-21835

None
    Linux kernel
Published: March 7, 2025

CVE-2025-21836

None
    Linux kernel
Published: March 7, 2025

CVE-2025-21837

None
    Linux kernel
Published: March 7, 2025

CVE-2025-21838

None
    Linux kernel
Published: March 7, 2025

CVE-2025-21839

None
    Linux kernel
Published: March 7, 2025

CVE-2025-21840

None
    Linux kernel
Published: March 7, 2025

CVE-2025-21841

None
    Linux kernel
Published: March 7, 2025

CVE-2025-21842

None
    Linux kernel
Published: March 7, 2025

CVE-2025-21843

None
    Linux kernel
Published: March 7, 2025

CVE-2025-1886

None
    Sage 200 Spain
Published: March 7, 2025

CVE-2025-1887

None
    Sage 200 Spain
Published: March 7, 2025

CVE-2025-27152

None
    axios
Published: March 7, 2025

CVE-2025-27518

None
    Cognita
Published: March 7, 2025

CVE-2025-27519

None
    Cognita
Published: March 7, 2025

CVE-2025-27597

None
    Vue I18n
Published: March 7, 2025

CVE-2024-12975

None
    UNKNOWN
Published: March 7, 2025

CVE-2024-38638

None
    QNAP QTS
    QNAP QuTS hero
Published: March 7, 2025

CVE-2024-48864

None
    File Station
Published: March 7, 2025

CVE-2024-50390

None
    QHora
Published: March 7, 2025

CVE-2024-50394

None
    Helpdesk
Published: March 7, 2025

CVE-2024-53694

None
    QVPN Device Client for Mac
    Qsync for Mac
    Qfinder Pro Mac
Published: March 7, 2025

CVE-2024-53695

None
    HBS 3 Hybrid Backup Sync
Published: March 7, 2025

CVE-2024-53696

None
    QuLog Center
    QTS
    QuTS hero
Published: March 7, 2025

CVE-2024-53697

None
    QNAP QTS
    QNAP QuTS hero
Published: March 7, 2025

CVE-2024-53698

None
    QNAP QTS
    QNAP QuTS hero
Published: March 7, 2025

CVE-2024-53699

None
    QNAP QTS
Published: March 7, 2025

CVE-2024-53700

None
    QHora
Published: March 7, 2025
Click here to see more Vulnerabilities