Alert Goza Theme Unauthorised File Deletion Risk(CVE202510134)
WordPress Goza theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Deletion vulnerability
Hong Kong Security Advisory Doccure Password Flaw(CVE20259114)
WordPress Doccure plugin <= 1.4.8 - Unauthenticated Arbitrary User Password Change vulnerability
Security Alert Rehub theme exposes protected posts(CVE20257368)
WordPress Rehub theme <= 19.9.7 - Unauthenticated Password Protected Post Disclosure vulnerability
Contributor Stored Cross Site Scripting Vulnerability(CVE20259849)
WordPress Html Social share buttons plugin <= 2.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Hong Kong Security Advisory UsersWP SQL Injection(CVE202510003)
WordPress UsersWP plugin <= 1.2.44 - Authenticated (Subscriber+) SQL Injection vulnerability
Community Alert Rehub Theme Shortcode Vulnerability(CVE20257366)
WordPress Rehub theme <= 19.9.7 - Unauthenticated Arbitrary Shortcode Execution via re_filterpost vulnerability
Security Advisory Smart Table Builder Stored XSS(CVE20259126)
WordPress Smart Table Builder plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter vulnerability
AdForest Theme Admin Access Bypass Advisory(CVE20258359)
WordPress AdForest theme <= 6.0.9 - Authentication Bypass to Admin vulnerability
Community Security Advisory Easy Social Feed XSS(CVE20256067)
WordPress Easy Social Feed plugin <= 6.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability
HK Security Alert Element Kit XSS(CVE20258360)
WordPress LA-Studio Element Kit for Elementor plugin <= 1.5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability