CVE-2026-24989 WordPress SUMO Affiliates Pro plugin < 11.4.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Object Injection.This issue affects SUMO Affiliates Pro: from n/a through 11.4.0...

CVE-2026-24989

CVE-2026-24989 describes a deserialization of untrusted data in the SUMO Affiliates Pro plugin for WordPress (affs), enabling PHP object injection. Affected: SUMO Affiliates Pro versions below 11.4.0. Root cause: deserialization of untrusted input leading to object injection. Impact: according to...

WordPress plugin SUMO Affiliates Pro 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

PT-2026-27877

Name of the Vulnerable Software and Affected Versions FantasticPlugins SUMO Affiliates Pro versions prior to 11.4.0 Description An issue exists in FantasticPlugins SUMO Affiliates Pro related to the deserialization of untrusted data, which can lead to object injection. The affected component is...

WordPress SUMO Affiliates Pro plugin < 11.4.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Phat RiO in WordPress Plugin SUMO Affiliates Pro versions 11.4.0...

CVE-2025-30631

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team Woocommerce Sales Funnel Builder, AA-Team Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer allows Reflected XSS.This issue affects Woocommerce Sales Funnel Builder...

CVE-2025-30631 Reflected Cross Site Scripting (XSS) vulnerability in AA-Team WordPress plugins

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team Woocommerce Sales Funnel Builder, AA-Team Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer allows Reflected XSS.This issue affects Woocommerce Sales Funnel Builder...

CVE-2025-30631 WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer azon-addon-js-composer allows Reflected XSS.This issue affects Amazon Affiliates Addon for WPBakery Page Builder...

CVE-2025-30631

CVE-2025-30631 is a Reflected XSS in AA-Team Woocommerce Sales Funnel Builder and AA-Team Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer). Affected: Woocommerce Sales Funnel Builder up to version 1.1; Amazon Affiliates Addon for WPBakery Page Builder up to 1.2. Root c...

PT-2026-1510

Name of the Vulnerable Software and Affected Versions AA-Team Woocommerce Sales Funnel Builder versions through 1.1 AA-Team Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer versions through 1.2 Description The software contains a flaw related to improper input handling...

CVE-2025-30628

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer allows SQL Injection.This issue affects Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer...

EUVD-2025-206068

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer allows SQL Injection.This issue affects Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer...

CVE-2025-30628

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer allows SQL Injection.This issue affects Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer...

CVE-2025-30628

CVE-2025-30628 affects the AA-Team Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer). The issue is an SQL Injection caused by improper neutralization of special elements in SQL commands, affecting plugin versions up to and including 1.2. The CVSS v3.1 base score is 8.5 ...

CVE-2025-30628 WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) plugin <= 1.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer azon-addon-js-composer allows SQL Injection.This issue affects Amazon Affiliates Addon for WPBakery Page Builder...

CVE-2025-30628 WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) plugin <= 1.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer allows SQL Injection.This issue affects Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer...

PT-2025-54445

Name of the Vulnerable Software and Affected Versions AA-Team Amazon Affiliates Addon for WPBakery Page Builder versions n/a through 1.2 Description An issue exists in AA-Team Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer that allows for SQL Injection. This occurs due...

WordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Denver Jackson in WordPress Plugin SUMO Affiliates Pro versions = 11.0.0...

Inside LockBit: Technical, Behavioral, and Financial Anatomy of a Ransomware Empire

LockBit has evolved from an obscure Ransomware-as-a-Service newcomer in 2019 to the most prolific ransomware franchise of 2024. Leveraging a recently leaked MySQL dump of the gang's management panel, this study offers an end-to-end reconstruction of LockBit's technical, behavioral, and financial...

CVE-2025-64228

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Retrieve Embedded Sensitive Data.This issue affects SUMO Affiliates Pro: from n/a through = 11.0.0...