CVE-2021-24932

The Auto Featured Image Auto Post Thumbnail WordPress plugin before 3.9.3 does not sanitise and escape the postid parameter before outputting back in an admin page within a JS block, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24661

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private post contents the user is otherwise unable to read, given the post ID...

WordPress plugin Giveaway SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in WordPress...

CVE-2020-8287

creationtimestamp| type| source ---|---|--- 2021-01-07 00:39:43+00:00| seen| https://t.me/cibsecurity/21725 2025-08-20 09:39:18+00:00| seen| https://bsky.app/profile/redmin78.bsky.social/post/3lwt4zkpwbs23...