ব্লগ

2025 10 18learnpresscve202511372

LearnPress Authorization Bypass Risks Database Integrity//Published on 2025-10-18//CVE-2025-11372

LearnPress CVE-2025-11372 unauthenticated DB manipulation fix in 4.2.9.4; urgent remediation steps for WordPress.

2025 10 18gspeech ttscve202510187

Authenticated SQL Injection in GSpeech TTS//Published on 2025-10-18//CVE-2025-10187

GSpeech TTS CVE-2025-10187 authenticated admin SQL injection mitigation and hardening guide

2025 10 18powerbi embed reportscve202510750

Critical Sensitive Data Exposure in PowerBI Plugin//Published on 2025-10-18//CVE-2025-10750

CVE-2025-10750 unauthenticated data exposure in Power BI Embed Reports and WordPress mitigations

2025 10 18event ticketscve202511517

Event Tickets Plugin Unauthenticated Payment Bypass//Published on 2025-10-18//CVE-2025-11517

Urgent WordPress Event Tickets CVE-2025-11517 unauthenticated payment bypass mitigation and patch guidance

2025 10 18theme editorcve20259890

Theme Editor CSRF Enables Remote Code Execution//Published on 2025-10-18//CVE-2025-9890

CSRF to RCE in Theme Editor <=3.0 explained with remediations and WAF guidance.

2025 10 16felan frameworkcve202510849

Felan Framework Authorization Bypass Enables Plugin Activation//Published on 2025-10-16//CVE-2025-10849

Felan Framework CVE-2025-10849 vulnerability and WP-Firewall mitigation guidance and update to 1.1.5

2025 10 15wp google mapcve202511365

Authenticated SQL Injection in WordPress Google Map//Published on 2025-10-15//CVE-2025-11365

Urgent guide to CVE-2025-11365 WP Google Map SQL injection and mitigation steps

2025 10 15quick featured imagescve202511176 2

Critical IDOR in Quick Featured Images Plugin//Published on 2025-10-15//CVE-2025-11176

Explains Quick Featured Images IDOR CVE-2025-11176 mitigations and patch 13.7.3

2025 10 16blindmatrix e commercecve202510406

Critical LFI in BlindMatrix Ecommerce Plugin//Published on 2025-10-16//CVE-2025-10406

Urgent guide to BlindMatrix LFI CVE-2025-10406, mitigation, patch, and WAF tips.

2025 10 16truelysell corecve202510742

Unauthenticated Password Reset Flaw in Truelysell//Published on 2025-10-16//CVE-2025-10742

Unauthenticated password-change vulnerability CVE-2025-10742 affects Truelysell Core <=1.8.6; remediation and WAF guidance.