TopBar Plugin CSRF Enables Unauthorized Settings Changes//Published on 2025-10-15//CVE-2025-10300

2025 10 15oceanpayment creditcard gatewaycve202511728

Oceanpayment Plugin Enables Unauthenticated Order Updates//Published on 2025-10-15//CVE-2025-11728

Unauthenticated order status vulnerability in Oceanpayment Gateway version 6.0 or lower; CVE-2025-11728 mitigation guide

2025 10 15lisfinity corecve20256042

Unauthenticated Privilege Escalation in Lisfinity Core//Published on 2025-10-15//CVE-2025-6042

Explains CVE-2025-6042 unauthenticated privilege escalation in Lisfinity Core and how WP Firewall protects sites

2025 10 15dynamically display postscve202511501

Unauthenticated SQL Injection in Dynamically Display Posts//Published on 2025-10-15//CVE-2025-11501

Urgent security alert for WordPress Dynamically Display Posts vulnerable <=1.1 CVE-2025-11501 with WAF guidance