wp-secure-mcp

wp-secure-mcp In plain terms: this lets an AI agent read and lightly write to a WordPress site through a real WordPress Application Password — the same credential type wp-admin already issues — and nothing else. There is no sign-up form, no OAuth client registration, no token endpoint of any kind...

EUVD-2025-11649

Malicious code in bioql PyPI...

CVE-2025-32490

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebsiteDefender wp secure wp-secure-by-sitesecuritymonitorcom allows Stored XSS.This issue affects wp secure: from n/a through = 1.2...

CVE-2025-32490

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebsiteDefender wp secure wp-secure-by-sitesecuritymonitorcom allows Stored XSS.This issue affects wp secure: from n/a through = 1.2...

CVE-2025-32490 WordPress wp secure plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebsiteDefender wp secure wp-secure-by-sitesecuritymonitorcom allows Stored XSS.This issue affects wp secure: from n/a through = 1.2...

CVE-2025-32490 WordPress wp secure <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebsiteDefender wp secure allows Stored XSS. This issue affects wp secure: from n/a through 1.2...

CVE-2025-32490

CVE-2025-32490 is an Stored XSS vulnerability in the WordPress plugin wp secure (wp secure by sitesecuritymonitor.com), affecting versions up to 1.2. The issue arises from improper neutralization of input during web page generation. Impact is limited to confidentiality, integrity, and availabilit...

CVE-2025-32490: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebsiteDefender wp secure wp-secure-by-sitesecuritymonitorcom allows Stored XSS.This issue affects wp secure: from n/a through = 1.2...

CVE-2024-4753

The WP Secure Maintenance WordPress plugin before 1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-4753

CVE-2024-4753 concerns the WP Secure Maintenance WordPress plugin (before 1.7). The issue is that certain settings are not properly sanitized/escaped, which could enable Stored XSS by high-privilege users (e.g., admin), including in multisite deployments where unfiltered_html is restricted. The d...

PT-2024-32643

Name of the Vulnerable Software and Affected Versions WP Secure Maintenance WordPress plugin versions prior to 1.7 Description The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example...

CVE-2024-4753: Improper Neutralization of Input During Web Page Generation

The WP Secure Maintenance WordPress plugin before 1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...