PT-2025-46297

Name of the Vulnerable Software and Affected Versions WordPress Holiday Class Post Calendar plugin versions up to and including 7.1 Description The Holiday Class Post Calendar plugin for WordPress is susceptible to Remote Code Execution via the contents parameter. This occurs because the plugin...

PT-2023-18197 · WordPress · Enable Svg

Name of the Vulnerable Software and Affected Versions: Enable SVG, WebP & ICO Upload WordPress plugin versions 1.0.0 through 1.0.3 Description: The issue is related to a Cross-Site Scripting vulnerability due to the lack of sanitization of SVG file contents. Recommendations: For Enable SVG, WebP ...