PT-2026-116024

Name of the Vulnerable Software and Affected Versions 10up Distributor versions prior to 2.3.2 Description A missing authorization issue exists in the ajax push function. This allows users with Contributor-level permissions in a multisite environment to publish posts on other sites within the...

PT-2026-51686

Name of the Vulnerable Software and Affected Versions ClearSale Total versions prior to 3.4.3 Description An issue exists in the clearsale total push AJAX action where the pagsegurometodo POST parameter is not properly sanitized. The handler is accessible to unauthenticated users via wp ajax nopr...