cleantalk
Vulnerabilities and Security Researches

Instant Breaking News, CVE-2025-58217

CVE, Research URL

CVE-2025-58217

Home page URL

Security reports for Instant Breaking News

Application

Instant Breaking News

Published on
Aug 27, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in GeroNikolov Instant Breaking News allows Stored XSS. This issue affects Instant Breaking News: from n/a through 1.0.
Affected versions
Min -, max 1.0.1.
Status
vulnerable
Previous vulnerability researches
WPPizza – A Restaurant Plugin (CVE-2025-57894) , Aug 23, 2025
WPPizza – A Restaurant Plugin (CVE-2024-35766) , Jun 22, 2024
WPPizza – A Restaurant Plugin (CVE-2013-6837) , Jun 07, 2024
WPPizza – A Restaurant Plugin (CVE-2023-46622) , Jun 07, 2024
WPPizza – A Restaurant Plugin (CVE-2024-33576) , Jun 07, 2024
New vulnerability
Add Code To Head (CVE-2025-48314) , Aug 29, 2025
130+ Widgets | Best Addons For Elementor – FREE (CVE-2025-58195) , Aug 29, 2025
WP Bulk Delete (CVE-2025-58192) , Aug 29, 2025
Responsive Mobile-Friendly Tooltip (CVE-2025-48316) , Aug 29, 2025
Savyour Affiliate Partner (CVE-2025-48306) , Aug 29, 2025