CVE-2025-8489: Improper Privilege Management

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

PT-2020-12657

Name of the Vulnerable Software and Affected Versions IMPress for IDX Broker WordPress plugin versions prior to 2.6.2 Description The issue allows authenticated attackers with minimal permissions to save arbitrary JavaScript in the plugin's settings panel via the idx update recaptcha key AJAX...

WatchGuard XTMv 11.12 Build 516911 - User Management Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications !-- KL-001-2017-004 : WatchGuard XTMv User Management Cross-Site Request Forgery Title: WatchGuard XTMv User Management Cross-Site Request Forgery Advisory ID: KL-001-2017-004 Publication Date: 2017.03.10 Publication URL:...