CVE-2025-8316

The Certifica WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘evento’ parameter in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation

Software Easy Digital Downloads Type Plugin Vulnerable versions 3.1-3.1.1.4.1 Fixed in 3.1.1.4.2 OWASP Top 10 A2: Broken Authentication Classification Privilege Escalation CVE CVE-2023-30869 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID ba942bc6af2f Credits Nguyen Anh...