CVE-2025-12845

CVE-2025-12845 refers to the WordPress plugin Tablesome Table – Contact Form DB (WPForms, CF7, Gravity, Forminator, Fluent) with versions 0.5.4–1.2.1. According to Wordfence, it allows unauthorised access to plugin data and can lead to privilege escalation due to a missing capability check in get...

alf.io Security Vulnerabilities

alf.io is open source ticket reservation system. A security vulnerability exists in versions prior to alf.io 2.0-Mr-2402. An attacker exploiting this vulnerability could use a specially crafted request to receive email logs sent by other events...