Printeers Print and Ship Directory Traversal Advisory//Published on 2025-08-27//CVE-2025-48081
Directory traversal in Printeers Print and Ship plugin (CVE-2025-48081) and defensive mitigations for WordPress
Authenticated Stored XSS in Migration Plugin//Published on 2025-08-26//CVE-2025-8490
CVE-2025-8490 stored XSS in All-in-One WP Migration; risks and fixes.
Authenticated Stored XSS in Lazy Load Videos//Published on 2025-08-26//CVE-2025-7732
Stored XSS in Lazy Load for Videos plugin on WordPress; update to 2.18.8 now
Regex Vulnerability Enables Stored XSS in SiteSEO//Published on 2025-08-26//CVE-2025-9277
SiteSEO 1.2.7 stored XSS CVE-2025-9277 in WordPress; update to 1.2.8.
Dokan Pro Authenticated Vendor Privilege Escalation//Published on 2025-08-26//CVE-2025-5931
Dokan Pro CVE-2025-5931: vendor privilege escalation, patch 4.0.6, and incident response.
Authenticated Path Traversal in Custom Query Shortcode//Published on 2025-08-25//CVE-2025-8562
Urgent patch for WordPress Custom Query Shortcode traversal CVE-2025-8562; upgrade to 0.5.0 and mitigate
Authenticated Subscriber Privilege Escalation in Event List//Published on 2025-08-25//CVE-2025-6366
Urgent guide to patch CVE-2025-6366 in Event List plugin and harden WordPress
CSRF włącza zapisany XSS w automatycznej wtyczce//Opublikowano 25.08.2025//CVE-2025-6247
Pilny poradnik CVE-2025-6247: Automatyczny atak CSRF na XSS w WordPressie, aktualizacja do wersji 3.119.0 i łagodzenie zagrożenia WAF.
Nieuwierzytelniony atak SQL Injection we wtyczce Vibes//Opublikowano 25.08.2025//CVE-2025-9172
Nieuwierzytelniony atak SQL Injection w Vibes – niezbędne poprawki CVE-2025-9172 dla witryn WordPress
Wtyczka Tourfic nie ma kontroli autoryzacji w różnych funkcjach //Opublikowano 25.08.2025 //CVE-2024-8860
Wyjaśnienie luki w zabezpieczeniach Tourfic CVE-2024-8860 wraz ze sposobami jej ograniczenia i wskazówkami WP-Firewall
Polski 
English 
简体中文 
香港中文 
繁體中文 
日本語 
Español 
Français 
العربية 
हिन्दी 
বাংলা 
한국어 
Italiano 
Português 
Nederlands 
Tiếng Việt 
Русский 
Deutsch 
Dansk