WP Security

WP Security Vulnerability Report

1000 posts
WWordPress Vulnerability Database

Unauthenticated SQL Injection in Events Calendar(CVE202512197)

  • November 5, 2025
WordPress The Events Calendar plugin 6.15.1.1 - 6.15.9 - Unauthenticated SQL Injection via s vulnerability
WWordPress Vulnerability Database

Urgent Community Advisory FunnelKit Email Vulnerability(CVE202512469)

  • November 5, 2025
WordPress FunnelKit Automations plugin <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending vulnerability
WWordPress Vulnerability Database

Hong Kong Security Alert Depicter Slider Vulnerability(CVE202511373)

  • November 5, 2025
WordPress Depicter Slider plugin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload vulnerability
WWordPress Vulnerability Database

Community Alert Unauthenticated Document Access in WordPress(CVE202512384)

  • November 5, 2025
WordPress Document Embedder plugin <= 2.0.0 - Missing Authorization to Unauthenticated Document Manipulation vulnerability
WWordPress Vulnerability Database

Community Alert Missing Authorization in Membership Plugin(CVE202511835)

  • November 5, 2025
WordPress Paid Membership Subscriptions plugin <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto Renewal vulnerability
WWordPress Vulnerability Database

Community Alert Image Comparison Addon Unauthorized Upload(CVE202510896)

  • November 4, 2025
WordPress Image Comparison Addon for Elementor plugin <= 1.0.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload vulnerability
WWordPress Vulnerability Database

Community Alert Image Comparison Addon Upload Vulnerability(CVE202510896)

  • November 4, 2025
WordPress Image Comparison Addon for Elementor plugin <= 1.0.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload vulnerability
WWordPress Vulnerability Database

Security Advisory CSRF in Navigation Links Plugin(CVE202512188)

  • November 4, 2025
WordPress Posts Navigation Links for Sections and Headings plugin <= 1.0.1 - Cross-Site Request Forgery to Settings Update vulnerability
WWordPress Vulnerability Database

DominoKit Plugin Poses Public Security Risk(CVE202512350)

  • November 4, 2025
WordPress DominoKit plugin <= 1.1.0 - Missing Authorization to Unauthenticated Settings Update vulnerability
WWordPress Vulnerability Database

Hong Kong Security Advisory Plugin Privilege Escalation(CVE202512158)

  • November 4, 2025
WordPress Simple User Capabilities plugin <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability
WP Security
© 2025 WP-Security.org Disclaimer: WP-Security.org is an independent, non-profit NGO community committed to sharing WordPress security news and information. We are not affiliated with WordPress, its parent company, or any related entities. All trademarks are the property of their respective owners.

Review My Order

0

Subtotal

Taxes & shipping calculated at checkout

Checkout

 
0
English
Chinese (Hong Kong) Chinese (China) Spanish Hindi French