PT-2026-25148

wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated attackers to subscribe arbitrary email addresses to post notifications by sending POST requests to the wpdAddSubscription handler in class.WpdiscuzHelperAjax.php. Attackers can exploit LIKE wildcard...

CVE-2025-0662

creationtimestamp| type| source ---|---|--- 2025-01-30 04:52:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113915509011401869 2025-01-30 05:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwq47bu3d2w 2025-01-30 07:11:30+00:00| seen|...