CVE-2026-13741: Improper Privilege Management

The Digits: WordPress Mobile Number Signup and Login plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.1.0.5. This is due to missing authorization and role validation in the digupdatewpwccustomfields function. This makes it possible for authenticat...

PT-2024-39435

Name of the Vulnerable Software and Affected Versions Wechat Social login plugin for WordPress versions up to, and including, 1.3.0 Description The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the convert remoteimage ...

PT-2024-4809

Name of the Vulnerable Software and Affected Versions: WordPress + Microsoft Office 365 / Azure AD | LOGIN plugin for WordPress versions up to, and including, 27.2 Description: The issue exists due to insufficient input sanitization and output escaping on user-supplied attributes in the plugin's...