CVE-2026-32458

The CVE details an SQL Injection vulnerability in the WordPress WOLF plugin (RealMag777 WOLF bulk-editor) affecting versions up to 1.0.8.7. The issue is described as an improper neutralization of special elements used in an SQL command, enabling Blind SQL Injection. No exploit specifics or affect...

PT-2026-25302

CVE-2026-32458 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF https://t.co/TCap5cW2sZ...

WordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin WOLF versions = 1.0.8.7...

CVE-2023-4017

The Goya theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘attra-color’, 'attra-size', and 'product-cata' parameters in versions up to, and including, 1.0.8.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...

WordPress plugin ElementsCSS Addons for Elementor 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

CVE-2025-22321

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TheInnovs ElementsCSS Addons for Elementor css-for-elementor allows Stored XSS.This issue affects ElementsCSS Addons for Elementor: from n/a through = 1.0.8.9...

CVE-2025-22321

CVE-2025-22321 is a stored XSS in the WordPress plugin ElementsCSS Addons for Elementor (component: ElementsCSS Addons for Elementor) affecting versions up to 1.0.8.7. Description and related records confirm improper neutralization of input during web page generation leading to stored cross-site ...

WordPress plugin ElementsCSS Addons for Elementor 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site scripting vulnerability exists in WordPress plugin ElementsCSS Addons for Elementor version...