WordPress Shirt Product Designer for WooCommerce plugin 1.0.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Evan NR in WordPress Plugin Shirt Product Designer for WooCommerce versions 1.0.4...

WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Evan NR in WordPress Plugin Salon booking system versions = 10.30.26...

Neo4j Cypher MCP server is vulnerable to DNS rebinding

ImpactDNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend...

WordPress aBlocks plugin < 2.9.1 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Evan NR in WordPress Plugin aBlocks versions 2.9.1...

WordPress iNET Webkit plugin 1.2.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Evan NR in WordPress Plugin iNET Webkit versions 1.2.4...

WordPress WPAdverts plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Evan NR in WordPress Plugin WPAdverts versions = 2.3.1...

WordPress Wallet System for WooCommerce plugin <= 2.7.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Evan NR in WordPress Plugin Wallet System for WooCommerce versions = 2.7.6...

WordPress Easy Elements for Elementor – Addons & Website Templates plugin <= 1.4.9 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Evan NR in WordPress Plugin Easy Elements for Elementor Addons & Website Templates versions = 1.4.9...

WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Evan in WordPress Plugin GeoDirectory versions = 2.8.157...

WordPress Five Star Restaurant Reservations plugin <= 2.7.14 - Payment Bypass vulnerability

Payment Bypass vulnerability discovered by Evan in WordPress Plugin Five Star Restaurant Reservations versions = 2.7.14...

WordPress Salon booking system plugin <= 10.30.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Evan in WordPress Plugin Salon booking system versions = 10.30.25...

CVE-2025-62865: Missing Authorization

Missing Authorization vulnerability in Evan Herman Post Cloner post-cloner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Cloner: from n/a through = 1.0.0...

PT-2025-50011

Name of the Vulnerable Software and Affected Versions Post Cloner versions prior to 1.0.1 Description Post Cloner contains a missing authorization flaw resulting from an incorrectly configured access control security level. This occurs due to a missing capability check within a function, allowing...

WordPress Flag Icons plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Caesar Evan Santoso in WordPress Plugin Flag Icons versions = 2.2...

WordPress Keep Backup Daily plugin <= 2.1.0 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by Caesar Evan Santoso Patchstack Alliance in WordPress Plugin Keep Backup Daily versions = 2.1.0...

WordPress Slides & Presentations Plugin <= 0.0.39 - Content Injection vulnerability

Content Injection vulnerability discovered by Caesar Evan Santoso in WordPress Plugin Slides & Presentations versions = 0.0.39...

WordPress Content Blocks Builder plugin <= 2.7.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Caesar Evan Santoso Patchstack Alliance in WordPress Plugin Content Blocks Builder versions = 2.7.6...

WordPress Slides & Presentations Plugin <= 0.0.39 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Caesar Evan Santoso Patchstack Alliance in WordPress Plugin Slides & Presentations versions = 0.0.39...

WordPress Slides & Presentations Plugin <= 0.0.39 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Caesar Evan Santoso Patchstack Alliance in WordPress Plugin Slides & Presentations versions = 0.0.39...

WordPress Virtual Bot Plugin <= 1.0.0 - CSRF Cross Site Scripting (XSS) vulnerability

CSRF Cross Site Scripting XSS vulnerability discovered by Caesar Evan Santoso Patchstack Alliance in WordPress Plugin Virtual Bot versions = 1.0.0...