{"uuid": "7149c2c7-60a3-4b41-993c-6952577f6522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2611", "type": "exploited", "source": "https://t.me/CyberDispatch/194", "content": "Hackers are exploiting a bug in the Sneeit Framework plugin (CVE-2025-6389) to run code on servers and create admin accounts on WordPress sites.\n\nSeparately, a flaw in ICTBroadcast (CVE-2025-2611) lets attackers use the BROADCAST cookie for unauthenticated remote shell access on exposed hosts.", "creation_timestamp": "2026-08-20T00:00:09.610710Z"}