WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by ChuongVN in WordPress Plugin Paid Member Subscriptions versions = 2.15.1...

WordPress Lettery Theme <= 1.1.7 is vulnerable to Local File Inclusion

Software Lettery Type Theme Vulnerable versions = 1.1.7 Fixed in 1.1.8 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-48290 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 853c7f0a8977 Credits Bonds Required privilege Unauthenticated Publishe...

WordPress StyleAI plugin <= 1.0.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by ch4r0n in WordPress Plugin StyleAI versions = 1.0.4...

WordPress Easy Post Duplicator Plugin <= 1.0.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by thiennv in WordPress Plugin Easy Post Duplicator versions = 1.0.1...

WordPress Clients plugin <= 1.1.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Clients versions = 1.1.4...

CVE-2025-21536

...

CVE-2024-23400

...

CVE-2022-40581

...

CVE-2022-42297

...

CVE-2021-23079

...

CVE-2019-14633

...