PT-2025-11333

Name of the Vulnerable Software and Affected Versions: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress versions prior to 3.22.1 Description: The issue is related to unauthorized access of data due to a missing capability check on the give reports earnings function. This...

WordPress plugin WPSchoolPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin WP01 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-11324

Name of the Vulnerable Software and Affected Versions: WP01 plugin for WordPress versions up to, and including, 2.6.2 Description: The issue allows authenticated attackers with Subscriber-level access and above to download and read the contents of arbitrary files on the server, which can contain...

CVE-2025-2025: Missing Authorization

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the givereportsearnings function in all versions up to, and including, 3.22.0. This makes it possible for unauthenticated attackers to...

CVE-2024-12336: Missing Authorization

The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'exportalldata' function in all versions up to, and including, 2.5.3. This makes it possible for authenticated attackers, with...

PT-2025-11316

Name of the Vulnerable Software and Affected Versions: The WC Affiliate – A Complete WooCommerce Affiliate Plugin versions up to, and including, 2.5.3 Description: The issue allows unauthorized access to data due to a missing capability check on the export all data function. This makes it possibl...

CVE-2024-12810

CVE-2024-12810 applies to the JobCareer WordPress Theme (

CVE-2025-1507

The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handleactions function in all versions up to, and including, 3.2.1. This makes it possible for unauthenticated attackers to disable all...

CVE-2025-1507

CVE-2025-1507 is a genuine vulnerability in the WordPress plugin ShareThis Dashboard for Google Analytics (WordPress). All versions up to and including 3.2.1 are affected due to a missing capability check in the function handle_actions(), allowing unauthenticated attackers to disable features or ...

CVE-2025-2103

The SoundRise Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on theironMusicajax function in all versions up to, and including, 1.6.11. This makes it possible for authenticated attackers, with...

CVE-2025-2289

The Zegen - Church WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX endpoints in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to impor...

CVE-2025-0952 Eco Nature - Environment & Ecology WordPress Theme <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

The Eco Nature - Environment & Ecology WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'cmsmastershideadminnotice' AJAX action in all versions up to, and including, 2.0.4. This mak...

CVE-2025-0955 VidoRev Extensions <= 2.9.9.9.9.9.5 - Missing Authorization to Unauthenticated Youtube Video Import

The VidoRev Extensions plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'vidorevimportsinglevideo' AJAX action in all versions up to, and including, 2.9.9.9.9.9.5. This makes it possible for unauthenticated attackers to import arbitrary youtube...

WordPress plugin SoundRise Music 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-11241

Name of the Vulnerable Software and Affected Versions Industrial theme for WordPress versions up to, and including, 1.7.8 Description The Industrial theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on th...

PT-2025-11252

Name of the Vulnerable Software and Affected Versions: ShareThis Dashboard for Google Analytics plugin for WordPress versions up to, and including, 3.2.1 Description: The issue allows unauthorized modification of data due to a missing capability check on the handle actions function. This makes it...

PT-2025-11237

Name of the Vulnerable Software and Affected Versions: The Resido - Real Estate WordPress Theme versions up to, and including, 3.6 Description: The issue is related to unauthorized access due to a missing capability check on the delete api key and save api key AJAX actions. This allows...

PT-2025-11245

Name of the Vulnerable Software and Affected Versions: SoundRise Music plugin for WordPress versions up to, and including, 1.6.11 Description: The issue allows unauthorized modification of data, potentially leading to privilege escalation, due to a missing capability check on the theirMusic ajax...

CVE-2025-1285: Missing Authorization

The Resido - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the deleteapikey and saveapikey AJAX actions in all versions up to, and including, 3.6. This makes it possible for unauthenticated attackers to issue requests to...