WP Security
WWordPress Vulnerability Database

Protecting Users Against MediaCommander Access Flaw(CVE202514508)

  • December 15, 2025
Broken Access Control in WordPress MediaCommander – Bring Folders to Media, Posts, and Pages Plugin
Read More
WWordPress Vulnerability Database

Safeguarding Users Against Lucky Draw CSRF(CVE202514462)

  • December 15, 2025
Cross Site Request Forgery (CSRF) in WordPress Lucky Draw Contests Plugin
Read More
WWordPress Vulnerability Database

Security Advisory Cross Site Scripting in Livemesh(CVE20258780)

  • December 13, 2025
Cross Site Scripting (XSS) in WordPress Livemesh SiteOrigin Widgets Plugin
Read More
WWordPress Vulnerability Database

Protecting Hong Kong Sites from Wishlist Injection(CVE20259207)

  • December 13, 2025
Content Injection in WordPress TI WooCommerce Wishlist Plugin
Read More
WWordPress Vulnerability Database

Public Advisory myCred Access Control Vulnerability(CVE202512362)

  • December 13, 2025
Broken Access Control in WordPress myCred Plugin
Read More
WWordPress Vulnerability Database

Hong Kong Security Alert CSRF Image Slider(CVE202514454)

  • December 12, 2025
Cross Site Request Forgery (CSRF) in WordPress Image Slider by Ays Plugin
Read More
WWordPress Vulnerability Database

Protecting Hong Kong Against GenerateBlocks Data Exposure(CVE202512512)

  • December 12, 2025
Sensitive Data Exposure in WordPress GenerateBlocks Plugin
Read More
WWordPress Vulnerability Database

Hong Kong Advisory Importer Access Flaws(CVE202513334)

  • December 12, 2025
Broken Access Control in WordPress Blaze Demo Importer Plugin
Read More
WWordPress Vulnerability Database

Protecting Users from Category Dropdown XSS(CVE202514132)

  • December 12, 2025
Cross Site Scripting (XSS) in WordPress Category Dropdown List Plugin
Read More
WWordPress Vulnerability Database

Community Alert XSS in VigLink Spotlight Plugin(CVE202513843)

  • December 12, 2025
Cross Site Scripting (XSS) in WordPress VigLink SpotLight By ShortCode Plugin
Read More
WP Security
© 2025 WP-Security.org Disclaimer: WP-Security.org is an independent, non-profit NGO community committed to sharing WordPress security news and information. We are not affiliated with WordPress, its parent company, or any related entities. All trademarks are the property of their respective owners.

hi there 👋 Sign up to receive awesome WP-Security Alert and update in your inbox, every week.

We don’t spam! Read our privacy policy for more info.

Check your inbox or spam folder to confirm your subscription.

Review My Order

0

Subtotal

Taxes & shipping calculated at checkout

Checkout

 
0
English
Chinese (Hong Kong) Chinese (China) Spanish Hindi French