WP Security

Browsing Category

WordPress Vulnerability Database

9 posts
WWordPress Vulnerability Database

HK Security Bulletin WordPress Coupon Affiliates Vulnerability(CVE202554025)

  • August 8, 2025
WordPress Coupon Affiliates Plugin <= 6.4.0 - Settings Change Vulnerability
WWordPress Vulnerability Database

Hong Kong Security Advisory WordPress Path Traversal(CVE202553561)

  • August 8, 2025
WordPress Prevent files / folders access Plugin <= 2.6.0 - Path Traversal Vulnerability
WWordPress Vulnerability Database

Here are concise options under 8 words with a Hong Kong security NGO tone: – Hong Kong Security Advisory WordPress Xinterio LFI – WordPress Xinterio LFI Risk Hong Kong Security – Hong Kong Security Alert Xinterio LFI – Xinterio WordPress LFI Advisory Hong Kong Which would you prefer or should I tailor the tone further?(CVE202554690)

  • August 8, 2025
WordPress Xinterio Theme <= 4.2 - Local File Inclusion Vulnerability
WWordPress Vulnerability Database

Hong Kong WordPress Urna Theme LFI Alert(CVE202554689)

  • August 8, 2025
WordPress Urna Theme <= 2.5.7 - Local File Inclusion Vulnerability
WWordPress Vulnerability Database

Protecting WordPress from XSS Vulnerabilities(CVE202549061)

  • August 8, 2025
Critical Vulnerability Alert: Cross-Site Scripting in Popular WordPress Plugin ‘Porn Videos Embed’ (Versions ≤ 0.9.1) Critical Vulnerability Alert:…
WWordPress Vulnerability Database

Critical WordPress XSS Vulnerability in Cost Calculator Plugin(CVE202554046)

  • August 8, 2025
WordPress Cost Calculator Plugin <= 7.4 - Cross Site Scripting (XSS) Vulnerability
WWordPress Vulnerability Database

Enhancing WordPress Security Against Countdown Exploits(CVE202575498)

  • August 6, 2025
WordPress Exclusive Addons for Elementor plugin <= 2.7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown vulnerability
WWordPress Vulnerability Database

Critical Vulnerability in WooCommerce Multiple File Upload(CVE20254403)

  • August 6, 2025
WordPress Drag and Drop Multiple File Upload for WooCommerce plugin <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function vulnerability
WWordPress Vulnerability Database

WordPress Booking Ultra Pro Plugin <1.1.4 - Cross-Site Scripting (XSS) vulnerability

  • May 7, 2023
The WordPress Booking Ultra Pro Plugin (v1.1.4 or earlier) has an unfixed high-severity XSS vulnerability, allowing malicious script injection. Other known vulnerabilities include CSRF issues.
WP Security
© 2025 WP-Security.org Disclaimer: WP-Security.org is an independent, non-profit NGO community committed to sharing WordPress security news and information. We are not affiliated with WordPress, its parent company, or any related entities. All trademarks are the property of their respective owners.

Review My Order

0

Subtotal

Taxes & shipping calculated at checkout

Checkout

 
0
English
Chinese (Hong Kong) Chinese (China) Spanish Hindi French