CVE-2025-66150

Technical details for CVE-2025-66150 (Appender WordPress plugin: Missing Authorization) are not publicly provided in the supplied documents. No vendor/version/impact information is disclosed here. Monitor for official advisories or updates from trusted sources.

PT-2025-54432

Name of the Vulnerable Software and Affected Versions merkulove Appender versions through 1.1.1 Description A missing authorization issue exists in merkulove Appender, allowing exploitation due to incorrectly configured access control security levels. Recommendations At the moment, there is no...

CVE-2025-49381

CVE-2025-49381 is a CSRF vulnerability in the WordPress plugin ads.txt Guru Connect (affected versions up to 1.1.1). The flaw lets an authenticated user perform cross-site requests without authorization (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H; base score 9.6, CRITICAL). Connected sources i...

PT-2024-32511 · WordPress · Cubewp Forms – All-In-One Form Builder

Name of the Vulnerable Software and Affected Versions: CubeWP Forms – All-in-One Form Builder versions n/a through 1.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...