WordPress WP DB Booster plugin <= 1.0.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by theviper17 in WordPress Plugin WP DB Booster versions = 1.0.1...

WordPress My Wp Brand plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin My Wp Brand versions = 1.1.3...

CVE-2025-53318

Missing Authorization vulnerability in WPManiax WP DB Booster wp-db-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP DB Booster: from n/a through = 1.0.1...

CVE-2025-53320

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wp Enhanced Free Downloads EDD allows DOM-Based XSS. This issue affects Free Downloads EDD: from n/a through 1.0.4...

CVE-2025-53314

Cross-Site Request Forgery CSRF vulnerability in sh1zen WP Optimizer wp-optimizer allows SQL Injection.This issue affects WP Optimizer: from n/a through = 2.5.0...

CVE-2025-53306

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in lucidcrew WP Forum Server forum-server allows SQL Injection.This issue affects WP Forum Server: from n/a through = 1.8.2...

CVE-2025-53305

Cross-Site Request Forgery CSRF vulnerability in lucidcrew WP Forum Server forum-server allows Stored XSS.This issue affects WP Forum Server: from n/a through = 1.8.2...

CVE-2025-53290

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MS WP Visual Sitemap wp-visual-sitemap allows Stored XSS.This issue affects WP Visual Sitemap: from n/a through = 1.0.2...

CVE-2025-53292

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in samsk WP DataTable wp-datatable allows DOM-Based XSS.This issue affects WP DataTable: from n/a through = 0.2.7...

CVE-2025-53278

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPeka WP AdCenter wpadcenter allows Stored XSS.This issue affects WP AdCenter: from n/a through = 2.6.0...

CVE-2025-53274

Cross-Site Request Forgery CSRF vulnerability in Hossin Asaadi WP Permalink Translator wp-permalink-translator allows Stored XSS.This issue affects WP Permalink Translator: from n/a through = 1.7.6...

CVE-2025-53269

Cross-Site Request Forgery CSRF vulnerability in imw3 My Wp Brand my-wp-brand allows Cross Site Request Forgery.This issue affects My Wp Brand: from n/a through = 1.1.3...

CVE-2025-53261

Cross-Site Request Forgery CSRF vulnerability in macbookandrew WP YouTube Live wp-youtube-live allows Cross Site Request Forgery.This issue affects WP YouTube Live: from n/a through = 1.10.0...

CVE-2025-53253

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh WP Edit wp-edit allows Stored XSS.This issue affects WP Edit: from n/a through = 4.0.4...

CVE-2025-53320

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wp Enhanced Free Downloads EDD free-downloads-edd allows DOM-Based XSS.This issue affects Free Downloads EDD: from n/a through = 1.0.4...

CVE-2025-53318 WordPress WP DB Booster plugin <= 1.0.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WPManiax WP DB Booster wp-db-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP DB Booster: from n/a through = 1.0.1...

CVE-2025-53318 WordPress WP DB Booster plugin <= 1.0.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WPManiax WP DB Booster wp-db-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP DB Booster: from n/a through = 1.0.1...

CVE-2025-53318

CVE-2025-53318 (WP DB Booster) : A Missing Authorization vulnerability in the WordPress plugin WP DB Booster (affected versions: from n/a through 1.0.1) allows exploitation of incorrectly configured access control security levels. Connected sources consistently identify it as a missing/weak autho...

CVE-2025-53314 WordPress WP Optimizer plugin <= 2.3.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in sh1zen WP Optimizer allows SQL Injection. This issue affects WP Optimizer: from n/a through 2.3.6...

CVE-2025-53314

CVE-2025-53314 describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin WP Optimizer (sh1zen) affecting versions up to 2.3.6. The entry notes that the CSRF vulnerability enables SQL injection. The CVSS vector indicates Network attack, no privileges required, user interaction required...