WP Security

WP Security Vulnerability Report

166 posts
WWordPress Vulnerability Database

Hong Kong CSRF Alert for ads txt(CVE202549381)

  • August 20, 2025
WordPress ads.txt Guru Connect Plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability
WWordPress Vulnerability Database

Security Advisory Houzez Theme Access Control Vulnerability(CVE202549406)

  • August 20, 2025
WordPress Houzez Theme <= 4.1.1 - Broken Access Control Vulnerability
WWordPress Vulnerability Database

Public Security Alert Templately Data Exposure(CVE202549408)

  • August 20, 2025
WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability
WWordPress Vulnerability Database

HK Security Alert Themify Audio Dock XSS(CVE202549392)

  • August 20, 2025
WordPress Themify Audio Dock Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability
WWordPress Vulnerability Database

Civic Security Advisory Colorbox XSS Vulnerability(CVE202549397)

  • August 20, 2025
WordPress Colorbox Lightbox Plugin <= 1.1.5 - Cross Site Scripting (XSS) Vulnerability
WWordPress Vulnerability Database

Hong Kong Security Alert Themify Icons XSS(CVE202549395)

  • August 20, 2025
WordPress Themify Icons Plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability
WWordPress Vulnerability Database

Security Advisory CSRF in Signup Sheets Plugin(CVE202549391)

  • August 20, 2025
WordPress Sign-up Sheets Plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability
WWordPress Vulnerability Database

Community Alert NEX Forms CSRF Vulnerability(CVE202549399)

  • August 20, 2025
WordPress NEX-Forms Plugin <= 9.1.3 - Cross Site Request Forgery (CSRF) Vulnerability
WWordPress Vulnerability Database

Community Alert Contact Form 7 Deletion Risk(CVE20258141)

  • August 20, 2025
Plugin Name Redirection for Contact Form 7 Type of Vulnerability Unauthenticated File Deletion CVE Number CVE-2025-8141 Urgency High…
WWordPress Vulnerability Database

Community Security Alert Contact Form 7 Vulnerability(CVE20258289)

  • August 20, 2025
WordPress Redirection for Contact Form 7 plugin <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization vulnerability
WP Security
© 2025 WP-Security.org Disclaimer: WP-Security.org is an independent, non-profit NGO community committed to sharing WordPress security news and information. We are not affiliated with WordPress, its parent company, or any related entities. All trademarks are the property of their respective owners.

Review My Order

0

Subtotal

Taxes & shipping calculated at checkout

Checkout

 
0