CLSA-2026-1792496010 TuxCare security update for @babel/helper-create-class-features-plugin (1 CVE)

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792496006 TuxCare security update for @babel/helper-create-class-features-plugin (2 CVEs)

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792496004 TuxCare security update for @babel/helper-create-class-features-plugin (1 CVE)

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792495997 TuxCare security update for @babel/helper-create-class-features-plugin (1 CVE)

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792291430 TuxCare security update for @babel/helper-create-regexp-features-plugin (1 CVE)

TuxCare rebuilt @babel/helper-create-regexp-features-plugin to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792291423 TuxCare security update for @babel/helper-create-regexp-features-plugin (2 CVEs)

TuxCare rebuilt @babel/helper-create-regexp-features-plugin to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792291422 TuxCare security update for @babel/helper-create-regexp-features-plugin (1 CVE)

TuxCare rebuilt @babel/helper-create-regexp-features-plugin to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792291421 TuxCare security update for @babel/helper-create-regexp-features-plugin (1 CVE)

TuxCare rebuilt @babel/helper-create-regexp-features-plugin to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CVE-2025-12582

The Features plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'featuresrevertoption AJAX endpoint in all versions up to, and including, 0.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVE-2025-12582

The Features plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'featuresrevertoption AJAX endpoint in all versions up to, and including, 0.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVE-2025-12582 Features <= 0.0.2 - Missing Authorization to Authenticated (Subscriber+) Option Reset

The Features plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'featuresrevertoption AJAX endpoint in all versions up to, and including, 0.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVE-2025-12582 Features <= 0.0.2 - Missing Authorization to Authenticated (Subscriber+) Option Reset

The Features plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'featuresrevertoption AJAX endpoint in all versions up to, and including, 0.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVE-2025-12582

The CVE-2025-12582 vulnerability affects the WordPress Features plugin up to version 0.0.2, caused by a missing capability check on the features_revert_option AJAX endpoint. This allows authenticated users with Subscriber-level access (and above) to modify data by reverting options, exposing unau...

PT-2025-45065

Name of the Vulnerable Software and Affected Versions Features plugin for WordPress versions up to and including 0.0.2 Description The Features plugin for WordPress is susceptible to unauthorized data modification. This is due to a missing capability check on the features revert option API...

EUVD-2015-1114

Malware in sbrugna...

CVE-2015-10104

A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown functionality of the file classes/class-icons-for-features-admin.php. The manipulation of the argument redirecturl leads to open redirect. T...

Open redirect

A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown functionality of the file classes/class-icons-for-features-admin.php. The manipulation of the argument redirecturl leads to open redirect. T...

CVE-2015-10104 Icons for Features Plugin class-icons-for-features-admin.php redirect

A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown functionality of the file classes/class-icons-for-features-admin.php. The manipulation of the argument redirecturl leads to open redirect. T...

CVE-2015-10104

A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown functionality of the file classes/class-icons-for-features-admin.php. The manipulation of the argument redirecturl leads to open redirect. T...

CVE-2015-10104 Icons for Features Plugin class-icons-for-features-admin.php redirect

A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown functionality of the file classes/class-icons-for-features-admin.php. The manipulation of the argument redirecturl leads to open redirect. T...