CVE-2026-12757: Improper Control of Generation of Code

The The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.9.27. This is due to the software allowing users to execute an action that do...

PT-2026-54614

The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.9.27. This is due to the plugin not properly verifying that a user is authorized to perfor...

PT-2026-25148

wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated attackers to subscribe arbitrary email addresses to post notifications by sending POST requests to the wpdAddSubscription handler in class.WpdiscuzHelperAjax.php. Attackers can exploit LIKE wildcard...

CVE-2025-0662

creationtimestamp| type| source ---|---|--- 2025-01-30 04:52:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113915509011401869 2025-01-30 05:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwq47bu3d2w 2025-01-30 07:11:30+00:00| seen|...