WP Security

WP Security Vulnerability Report

571 posts
WWordPress Vulnerability Database

Protect Users from Accessibility Plugin Access Risk(CVE202558976)

  • September 9, 2025
WordPress Accessibility Checker by Equalize Digital Plugin <= 1.31.0 - Broken Access Control Vulnerability
WWordPress Vulnerability Database

Hong Kong Security NGO Warns Welcart XSS Risk(CVE202558984)

  • September 9, 2025
WordPress Welcart e-Commerce Plugin <= 2.11.20 - Cross Site Scripting (XSS) Vulnerability
WWordPress Vulnerability Database

Public Advisory Include Me Plugin XSS Risk(CVE202558983)

  • September 9, 2025
WordPress Include Me Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability
WWordPress Vulnerability Database

Public Safety Notice Tutor LMS SQL Injection(CVE202558993)

  • September 9, 2025
WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability
WWordPress Vulnerability Database

Community Alert AutomatorWP Enables Remote Code Execution(CVE20259539)

  • September 8, 2025
WordPress AutomatorWP plugin <= 5.3.6 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation vulnerability
WWordPress Vulnerability Database

Doccure Plugin Subscriber File Upload Vulnerability Advisory(CVE20259112)

  • September 8, 2025
WordPress Doccure plugin <= 1.4.8 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability
WWordPress Vulnerability Database

Hong Kong Security Alert Goza Upload Risk(CVE20255394)

  • September 8, 2025
WordPress Goza theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation vulnerability
WWordPress Vulnerability Database

Alert Goza Theme Unauthorised File Deletion Risk(CVE202510134)

  • September 8, 2025
WordPress Goza theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Deletion vulnerability
WWordPress Vulnerability Database

Hong Kong Security Advisory Doccure Password Flaw(CVE20259114)

  • September 8, 2025
WordPress Doccure plugin <= 1.4.8 - Unauthenticated Arbitrary User Password Change vulnerability
WWordPress Vulnerability Database

Security Alert Rehub theme exposes protected posts(CVE20257368)

  • September 6, 2025
WordPress Rehub theme <= 19.9.7 - Unauthenticated Password Protected Post Disclosure vulnerability
WP Security
© 2025 WP-Security.org Disclaimer: WP-Security.org is an independent, non-profit NGO community committed to sharing WordPress security news and information. We are not affiliated with WordPress, its parent company, or any related entities. All trademarks are the property of their respective owners.
en_USEnglish
zh_HKChinese (Hong Kong) zh_CNChinese (China) en_USEnglish

Review My Order

0

Subtotal

Taxes & shipping calculated at checkout

Checkout

 
0