WordPress plugin “Friends” code issue vulnerability

WordPress Friends plugin is a plugin for social interaction. WordPress Friends plugin has a code issue vulnerability that stems from improper deserialization of the queryvars parameter, which can be exploited by an attacker to cause code execution...

VulnCheck KEV: CVE-2024-25600

Remote Code Execution vulnerability in Bricks Builder Theme preparequeryvarsfromsettings function...

PT-2021-16322

Name of the Vulnerable Software and Affected Versions: Squaretype WordPress theme version 3.0.3 and earlier Description: The issue allows unauthenticated users to manipulate the query vars used to retrieve posts to display in one of its REST endpoints, without any validation. As a result, private...