Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 0.2.5.6  to 0.2.6.1. This is due to missing or incorrect nonce validation on the newsblogger_install_and_activate_plugin() function. This makes it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This is due to a reverted fix of CVE-2025-1305.

CVE-2025-12821 is a Cross-Site Request Forgery (CSRF) vulnerability identified in the NewsBlogger WordPress theme developed by spicethemes, specifically affecting versions 0.2.5.6 through 0.2.6.1. The vulnerability stems from missing or incorrect nonce validation in the function newsblogger_install_and_activate_plugin(), which is responsible for installing and activating plugins within the theme context. Nonces in WordPress are security tokens used to verify that requests are intentional and originate from legitimate users. The absence or improper handling of these nonces allows an attacker to craft a malicious request that, when executed by an authenticated site administrator (via social engineering such as clicking a link), can trigger unauthorized actions. The critical consequence of this vulnerability is that it enables unauthenticated attackers to upload arbitrary files to the server, leading to remote code execution (RCE). This means attackers can execute arbitrary commands on the web server, potentially taking full control of the affected WordPress site and its underlying infrastructure. This vulnerability is a regression caused by a reverted fix for CVE-2025-1305, indicating that a previously resolved security issue was reintroduced. The CVSS v3.1 score of 8.8 reflects the high impact and ease of exploitation, with no privileges required and only user interaction needed. Although no public exploits have been observed in the wild yet, the threat is significant due to the widespread use of WordPress and the popularity of themes like NewsBlogger. The vulnerability affects the confidentiality, integrity, and availability of affected systems, as attackers can exfiltrate data, modify site content, or disrupt services. The attack vector is network-based, requiring only that an attacker lure an administrator into performing an action. The lack of available patches at the time of reporting increases the urgency for mitigation. Organizations using the NewsBlogger theme should prioritize identifying affected installations and applying security controls to prevent exploitation.

Detailed information about CVE-2025-12821: CWE-352 Cross-Site Request Forgery (CSRF) in spicethemes NewsBlogger affecting spicethemes NewsBlogger. Get real-time

CVE-2025-12821: CWE-352 Cross-Site Request Forgery (CSRF) in spicethemes NewsBlogger - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12821: CWE-352 Cross-Site Request Forgery (CSRF) in spicethemes NewsBlogger

Threats Tagged 'cve-2025-12821'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-12821'

Lead Pen Test Professional