CVE-2025-6993

The Ultimate WP Mail plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization within the getemaillogdetails AJAX handler in versions 1.0.17 to 1.3.6. The handler reads the client-supplied postid and retrieves the corresponding email log post content including the...

PT-2025-13828

Name of the Vulnerable Software and Affected Versions Netgear WNR854T version 1.5.2 Description The issue allows an attacker to perform Command Injection. This can be achieved by sending a specially crafted request to the "post.cgi" endpoint, updating the get email parameter in nvram. After...