WS-2018-0187

Possible SQL injection for removing&adding a plugin. Possible SQL injection for entry category assignment. Prevent moving files by using their directory name. Add new configuration option to enable fetching local files for the media uploader. By default this is now disabled to prevent Server Side...

EUVD-2025-203232

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing authorization checks on the SubmitCatProductRequest AJAX action. This makes it possible for unauthenticated attackers to create arbitrary...