Critical IDOR in Quick Featured Images Plugin//Published on 2025-10-15//CVE-2025-11176

2025 10 16truelysell corecve202510742

Unauthenticated Password Reset Flaw in Truelysell//Published on 2025-10-16//CVE-2025-10742

Unauthenticated password-change vulnerability CVE-2025-10742 affects Truelysell Core <=1.8.6; remediation and WAF guidance.