WordPress Order Splitter for WooCommerce plugin <= 5.3.0 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by LVT-tholv2k in WordPress Plugin Order Splitter for WooCommerce versions = 5.3.0...

WordPress DigiWidgets Image Editor plugin <= 1.10 - Remote Code Execution (RCE) Vulnerability

Remote Code Execution RCE Vulnerability discovered by 0xd4rk5id3 in WordPress Plugin DigiWidgets Image Editor versions = 1.10...

WordPress WP RealEstate plugin <= 1.6.26 - Authentication Bypass via 'process_register' vulnerability

Authentication Bypass via 'processregister' vulnerability discovered by Tonn in WordPress Plugin WP RealEstate versions = 1.6.26...

WordPress YayExtra <= 1.5.2 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin YayExtra versions = 1.5.2...

WordPress Actionwear products sync plugin <= 2.3.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Dimas Maulana in WordPress Plugin Actionwear products sync versions = 2.3.3...

WordPress RJ Quickcharts plugin <= 0.6.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin RJ Quickcharts versions = 0.6.1...

WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.2.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by NAWardRox in WordPress Plugin Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One versions = 2.2.6...

WordPress Ni WooCommerce Product Enquiry plugin <= 4.1.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Ni WooCommerce Product Enquiry versions = 4.1.8...

WordPress Import Export Suite for CSV and XML Datafeed plugin <= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by mikemyers in WordPress Plugin WP Ultimate CSV Importer versions = 7.19...

WordPress Import Export Suite for CSV and XML Datafeed plugin <= 7.19 - Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Authenticated Subscriber+ Arbitrary File Deletion vulnerability discovered by mikemyers in WordPress Plugin WP Ultimate CSV Importer versions = 7.19...

WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Aiden in WordPress Plugin Advanced WooCommerce Product Sales Reporting versions = 4.1.1...

WordPress RSVPMarker plugin <= 11.6.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Aiden in WordPress Plugin RSVPMarker versions = 11.6.7...

WordPress XV Random Quotes plugin <= 2.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Aiden in WordPress Plugin XV Random Quotes versions = 2.0.0...

WordPress WP AutoKeyword plugin <= 1.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin WP AutoKeyword versions = 1.0...

WordPress History Log by click5 plugin <= 1.0.13 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin History Log by click5 versions = 1.0.13...

WordPress Next-Cart Store to WooCommerce Migration plugin <= 3.9.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k in WordPress Plugin Next-Cart Store to WooCommerce Migration versions = 3.9.4...

WordPress Salesmate Add-On for Gravity Forms plugin <= 2.0.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Salesmate Add-On for Gravity Forms versions = 2.0.3...

WordPress CBX Poll plugin <= 2.0.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika in WordPress Plugin CBX Poll versions = 2.0.4...

Exploit for CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass PoC This repository...

SUSE CVE-2025-2783

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. Chromium security severity: High...