Filter
AND
-Infinity
0

Golo City Travel GuideGolo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change

First published (updated )

InWave JobsInWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset

First published (updated )

PressMart Modern Elementor WooCommerce WordPress ThemePressMart - Modern Elementor WooCommerce WordPress Theme <= 1.2.16 - Unauthenticated Arbitrary Shortcode Execution

First published (updated )

Age VerificationWordPress Wr Age Verification plugin <= 2.0.0 - SQL Injection vulnerability

First published (updated )

WordPressWordPress Blogpoet theme <= 1.0.3 - Broken Access Control vulnerability

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WordPressWordPress AR For WordPress plugin <= 6.2 - Arbitrary File Upload vulnerability

First published (updated )

WordPressWordPress Meetup plugin <= 0.1 - Broken Authentication vulnerability

First published (updated )

WordPressWPCOM Member <= 1.5.2.1 - Unauthenticated Privilege Escalation via User Meta

EPSS
0.09%
First published (updated )

WordPress简数采集器 (Keydatas) <= 2.5.2 - Unauthenticated Arbitrary File Upload

EPSS
0.09%
First published (updated )

WordPressWordPress Foxiz Theme theme <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Simple Job BoardThe Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up t…

First published (updated )

WordPressWordPress CubeWP plugin <= 1.1.12 - Arbitrary File Upload vulnerability

EPSS
0.04%
First published (updated )

Piraeus Bank WooCommerce Payment GatewaySQL Injection

First published (updated )

WordPressWordPress ProductX – Gutenberg WooCommerce Blocks Plugin <= 3.1.4 is vulnerable to PHP Object Injection

EPSS
0.04%
First published (updated )

WordPressWordPress before 5.8 lacks support for the Update URI plugin header. This makes it easier for remote…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WordPressObject injection via local phar file

First published (updated )

WordPressInsecure Deserialization of untrusted data in rmccue/requests

First published (updated )

Red Hat FedoraWordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility/FilteredI…

First published (updated )

Red Hat Fedorawp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain privileges…

First published (updated )

Red Hat Fedorais_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines wheth…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Ubuntuis_protected_meta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion b…

First published (updated )

Red Hat FedoraWordPress before 5.5.2 allows attackers to gain privileges via XML-RPC.

First published (updated )

Elementor Website BuilderThe Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authen…

First published (updated )

Debian LinuxInput Validation

First published (updated )

Debian LinuxSSRF

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Debian LinuxSSRF

First published (updated )

WordPressIn WordPress before 4.9.9 and 5.x before 5.0.1, contributors could conduct PHP object injection atta…

First published (updated )

debian/wordpressSQL Injection

First published (updated )

debian/wordpressSQL Injection

First published (updated )

Oracle Data IntegratorSQL Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203