CVE-2026-14281

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...

CVE-2026-14281

The Automation Web Platform (WAWP) plugin for WordPress is vulnerable to unauthenticated privilege escalation in versions up to and including 4.8.6 . The root cause is a lack of permission enforcement on the POST /wp-json/wawp/v1/signup/ REST route and the absence of a key allowlist in the finish...

EUVD-2026-86548

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...

CVE-2026-77264: Weak Password Recovery Mechanism for Forgotten Password

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...

CVE-2025-21401

creationtimestamp| type| source ---|---|--- 2025-02-14 23:18:20+00:00| seen| https://infosec.exchange/users/cve/statuses/114004793742751259 2025-02-15 00:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li6gtmux7l2y 2025-02-15 01:10:26+00:00| seen|...

CVE-2025-26511

creationtimestamp| type| source ---|---|--- 2025-02-13 15:45:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113997351988993753 2025-02-13 16:17:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li33mqcjga2h 2025-02-13 16:48:56+00:00| seen|...

CVE-2025-20097

creationtimestamp| type| source ---|---|--- 2025-02-12 22:19:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7ezyawf2h 2025-02-12 23:07:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4142 2025-02-13 00:25:53+00:00| seen| https://t.me/cvedetector/17937...

CVE-2025-24106

creationtimestamp| type| source ---|---|--- 2025-01-27 22:17:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxsgvvzx2r 2025-01-28 16:49:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113907000992779619 2025-03-19 21:18:25+00:00| seen|...

CVE-2025-22723

creationtimestamp| type| source ---|---|--- 2025-01-21 14:16:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgb25py7w62e 2025-01-21 14:48:52+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113866894555001409 2025-01-21 16:07:48+00:00| seen|...

CVE-2025-23654

creationtimestamp| type| source ---|---|--- 2025-01-16 20:18:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv42adhzh2e 2025-01-16 23:38:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113840665301543417...

CVE-2025-23566

creationtimestamp| type| source ---|---|--- 2025-01-16 20:18:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3yuty2n2j 2025-01-16 22:38:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113840429087573514...

CVE-2018-25107

creationtimestamp| type| source ---|---|--- 2024-12-29 06:27:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113734689969951177 2024-12-29 07:15:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leghuqgyl72o 2024-12-29 09:00:49+00:00| seen|...

CVE-2024-53227

creationtimestamp| type| source ---|---|--- 2024-12-27 14:18:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lec6l6svq32f 2024-12-27 17:37:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113725999239634035 2025-08-14 10:00:00+00:00| seen|...