Wordfence Intelligence Weekly WordPress Vulnerability Report (January 20, 2025 to January 26, 2025)

🗓️ 30 Jan 2025 16:04:18Reported by Chloe ChamberlandType

Last week, 212 vulnerabilities reported in WordPress plugins and themes. Access vulnerability data for safety.

Reporter	Title	Published	Views	Family All 2411
ATTACKERKB	CVE-2025-23662	16 Jan 202520:15	–	attackerkb
BDU FSTEC	The vulnerability of the ABC Notation plugin for WordPress’ content management system arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain unauthorized access to protected information.	26 Mar 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the Premium Package: Selling Digital Products securely through the WordPress content management system. This vulnerability is related to the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.	26 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Quiz Maker plugin of the WordPress content management system, related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL code.	26 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the aysavegoogle_credentials() function in the Quiz Maker plugin of the WordPress content management system allows a hacker to gain unauthorized access to protected information and perform cross-site scripting attacks.	26 May 202500:00	–	bdu_fstec
Circl	CVE-2024-10324	24 Jan 202513:42	–	circl
Circl	CVE-2024-10552	25 Jan 202506:46	–	circl
Circl	CVE-2024-10574	25 Jan 202516:52	–	circl
Circl	CVE-2024-10628	25 Jan 202516:53	–	circl
Circl	CVE-2024-10633	25 Jan 202516:50	–	circl