CVE-2024-13557

CVE-2024-13557 affects the Shortcodes by United Themes plugin for WordPress. All versions up to 5.1.6 are vulnerable to unauthenticated arbitrary shortcode execution because do_shortcode can be invoked without proper input validation. The impact is ability to execute arbitrary shortcodes, with no...

WordPress Shortcodes by United Themes plugin <= 5.1.6 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by mikemyers in WordPress Plugin Shortcodes by United Themes versions = 5.1.6...

WordPress plugin Shortcodes by United Themes 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A code injection vulnerability exists in WordPress plugin...

CVE-2025-31073

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bensibley Unlimited unlimited allows Stored XSS.This issue affects Unlimited: from n/a through = 1.45...

CVE-2025-31073 WordPress Unlimited plugin <= 1.45 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bensibley Unlimited unlimited allows Stored XSS.This issue affects Unlimited: from n/a through = 1.45...

CVE-2025-31073 WordPress Unlimited plugin <= 1.45 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bensibley Unlimited unlimited allows Stored XSS.This issue affects Unlimited: from n/a through = 1.45...

CVE-2025-31073

CVE-2025-31073 affects the WordPress theme Unlimited (

CVE-2025-30566

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aryan Themes Clink clink allows DOM-Based XSS.This issue affects Clink: from n/a through = 1.2.2...

CVE-2025-30566

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aryan Themes Clink clink allows DOM-Based XSS.This issue affects Clink: from n/a through = 1.2.2...

CVE-2025-30566 WordPress Clink - <= <= 1.2.2 Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aryan Themes Clink allows DOM-Based XSS. This issue affects Clink: from n/a through 1.2.2...

CVE-2025-30566

CVE-2025-30566 concerns Clink (WordPress Link Manager, by Aryan Themes). The connected vulnerability data indicate an Authenticated (Contributor+) cross-site scripting issue in Clink versions up to 1.2.2, with Wordfence listing it as an Unpatched, stored XSS vulnerability in Clink

CVE-2025-30566 WordPress Clink plugin <= 1.2.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aryan Themes Clink clink allows DOM-Based XSS.This issue affects Clink: from n/a through = 1.2.2...

CVE-2025-28881

Cross-Site Request Forgery CSRF vulnerability in mg12 Mobile Themes wp-mobile-themes allows Cross Site Request Forgery.This issue affects Mobile Themes: from n/a through = 1.1.1...

Wordfence Intelligence Weekly WordPress Vulnerability Report (March 3, 2025 to March 9, 2025)

Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...

WordPress Mobile Themes plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Mobile Themes versions = 1.1.1...

CVE-2025-28881

Cross-Site Request Forgery CSRF vulnerability in mg12 Mobile Themes wp-mobile-themes allows Cross Site Request Forgery.This issue affects Mobile Themes: from n/a through = 1.1.1...

CVE-2025-28881 WordPress Mobile Themes plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in mg12 Mobile Themes wp-mobile-themes allows Cross Site Request Forgery.This issue affects Mobile Themes: from n/a through = 1.1.1...

CVE-2025-28881 WordPress Mobile Themes plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in mg12 Mobile Themes wp-mobile-themes allows Cross Site Request Forgery.This issue affects Mobile Themes: from n/a through = 1.1.1...

CVE-2025-28881

CVE-2025-28881 describes a CSRF in the WordPress Mobile Themes plugin (mg12 Mobile Themes) affecting versions up to 1.1.1. Impact: CSRF could enable unauthorized state-changing requests. CVSS v3.1 base score 4.3 (Network, Low Attack Complexity, Privileges Required: None, User Interaction: Require...

WordPress plugin Mobile Themes 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...