WP Security
WWordPress Vulnerability Database

Public Safety Notice Tutor LMS SQL Injection(CVE202558993)

  • September 9, 2025
WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability
Read More
WWordPress Vulnerability Database

Community Alert AutomatorWP Enables Remote Code Execution(CVE20259539)

  • September 8, 2025
WordPress AutomatorWP plugin <= 5.3.6 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation vulnerability
Read More
WWordPress Vulnerability Database

Doccure Plugin Subscriber File Upload Vulnerability Advisory(CVE20259112)

  • September 8, 2025
WordPress Doccure plugin <= 1.4.8 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability
Read More
WWordPress Vulnerability Database

Hong Kong Security Alert Goza Upload Risk(CVE20255394)

  • September 8, 2025
WordPress Goza theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation vulnerability
Read More
WWordPress Vulnerability Database

Alert Goza Theme Unauthorised File Deletion Risk(CVE202510134)

  • September 8, 2025
WordPress Goza theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Deletion vulnerability
Read More
WWordPress Vulnerability Database

Hong Kong Security Advisory Doccure Password Flaw(CVE20259114)

  • September 8, 2025
WordPress Doccure plugin <= 1.4.8 - Unauthenticated Arbitrary User Password Change vulnerability
Read More
WWordPress Vulnerability Database

Security Alert Rehub theme exposes protected posts(CVE20257368)

  • September 6, 2025
WordPress Rehub theme <= 19.9.7 - Unauthenticated Password Protected Post Disclosure vulnerability
Read More
WWordPress Vulnerability Database

Contributor Stored Cross Site Scripting Vulnerability(CVE20259849)

  • September 6, 2025
WordPress Html Social share buttons plugin <= 2.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Read More
WWordPress Vulnerability Database

Hong Kong Security Advisory UsersWP SQL Injection(CVE202510003)

  • September 6, 2025
WordPress UsersWP plugin <= 1.2.44 - Authenticated (Subscriber+) SQL Injection vulnerability
Read More
WWordPress Vulnerability Database

Community Alert Rehub Theme Shortcode Vulnerability(CVE20257366)

  • September 6, 2025
WordPress Rehub theme <= 19.9.7 - Unauthenticated Arbitrary Shortcode Execution via re_filterpost vulnerability
Read More
WP Security
© 2025 WP-Security.org Disclaimer: WP-Security.org is an independent, non-profit NGO community committed to sharing WordPress security news and information. We are not affiliated with WordPress, its parent company, or any related entities. All trademarks are the property of their respective owners.

hi there 👋 Sign up to receive awesome WP-Security Alert and update in your inbox, every week.

We don’t spam! Read our privacy policy for more info.

Check your inbox or spam folder to confirm your subscription.

Review My Order

0

Subtotal

Taxes & shipping calculated at checkout

Checkout

 
0