12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

June 5, 2025

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

In a recent disclosure by cybersecurity researcher Jeremiah Fowler, vpnMentor uncovered a massive unprotected database allegedly tied to Passion.io, a no-code app-building platform used by influencers …

Published Date:
Jun 05, 2025 (4 hours, 39 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2023-4966

Source: Read More

Previous ArticleCisco Patches Two Vulnerabilities in CCP and ISE: Proof-of-Concept Exploits Publicly Available

Next Article IBM Cloud login breaks for second time this week and Big Blue isn’t saying why

Highlights

CVE-2025-6755 – WordPress Game Users Share Buttons Plugin Remote Code Execution and File Deletion Vulnerability

June 28, 2025

CVE ID : CVE-2025-6755

Published : June 28, 2025, 6:15 a.m. | 4 hours, 14 minutes ago

Description : The Game Users Share Buttons plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajaxDeleteTheme() function in all versions up to, and including, 1.3.0. This makes it possible for Subscriber-level attackers to add arbitrary file paths (such as ../../../../wp-config.php) to the themeNameId parameter of the AJAX request, which can lead to remote code execution.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

Building a multimodal RAG based application using Amazon Bedrock Data Automation and Amazon Bedrock Knowledge Bases

CVE-2025-53014 – ImageMagick Heap Buffer Overflow Vulnerability

Chinese Group Silver Fox Uses Fake Websites to Deliver Sainbox RAT and Hidden Rootkit

CVE-2025-5493 – Baison Channel Middleware SQL Injection

CVE-2025-6755 – WordPress Game Users Share Buttons Plugin Remote Code Execution and File Deletion Vulnerability

Free Email Signature Generator by Mailmodo

The Saintly Cat Next Door that Feeds on Souls

New TeleMessage SGNL Flaw Is Actively Being Exploited by Attackers

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

Related Posts