Baidu Share Plugin CSRF Enables Stored XSS//Published on 2025-08-23//CVE-2025-48320
CVE-2025-48320 BaiduShare WordPress plugin CSRF to Stored XSS mitigation and remediation guide
Critical XSS in Mesa Reservation Widget Plugin//Published on 2025-08-23//CVE-2025-48319
WordPress Mesa Reservation Widget stored XSS CVE-2025-48319: detection, containment, and remediation.
Case Theme User Plugin Authentication Bypass//Published on 2025-08-22//CVE-2025-5821
Critical CVE-2025-5821: WordPress Case Theme User plugin social-login bypass; update to 1.0.4 now
Critical Wptobe Memberships Authenticated File Deletion//Published on 2025-08-22//CVE-2025-9048
Urgent WordPress CVE-2025-9048 WPtobe-memberships subscriber file deletion mitigation and incident response
Critical CSRF in Restore Permanently Delete Plugin//Published on 2025-08-22//CVE-2025-7839
Urgent CSRF flaw in Restore Permanently delete Post or Page Data plugin with mitigations
Authenticated Stored XSS in WS Theme Addons//Published on 2025-08-22//CVE-2025-8062
Authenticated stored XSS in WS Theme Addons ws_weather shortcode with practical mitigations.
Authenticated Stored XSS in Ogulo 360 Tour//Published on 2025-08-22//CVE-2025-9131
Urgent CVE-2025-9131 stored XSS in Ogulo plugin guidance for WordPress site owners
ShortcodeHub Authenticated Stored Cross Site Scripting//Published on 2025-08-22//CVE-2025-7957
Urgent stored XSS in ShortcodeHub up to version 1.7.1 CVE-2025-7957 WordPress
Ni WooCommerce Customer Product Report Authorization Bypass//Published on 2025-08-22//CVE-2025-7827
CVE-2025-7827: Broken access control in Ni WooCommerce Customer Product Report enables subscriber settings update.
Missing Authorization Allows Contributor Feed Deletion//Published on 2025-08-22//CVE-2025-7828
WP-Firewall advisory on CVE-2025-7828 enabling contributor feed deletions; actionable mitigations
Русский 
English 
简体中文 
香港中文 
繁體中文 
日本語 
Español 
Français 
العربية 
हिन्दी 
বাংলা 
한국어 
Italiano 
Português 
Nederlands 
Tiếng Việt 
Polski 
Deutsch 
Dansk