CVE

CVE 2025-05-16

CVE-2025-4389: Unauthenticated Arbitrary File Upload in Crawlomatic Multipage Scraper Post Generator

Unauthenticated Arbitrary File Upload in Crawlomatic Multipage Scraper Post Generator

7 min read read

CVE 2025-05-08

CVE-2025-4403: Unauthenticated Arbitrary File Upload in Drag and Drop Multiple File Upload for WooCommerce

Unauthenticated Arbitrary File Upload in Drag and Drop Multiple File Upload for WooCommerce

5 min read read

CVE 2025-04-06

CVE-2025-3419: Unauthenticated Arbitrary File Read in Eventin

CVE-2025-3419 affects the Event Manager, Events Calendar, Tickets, Registrations – Eventin WordPress plugin through version 4.0.26. The vulnerability allows unauthenticated attackers to read arbitrary files from the server through the plugin's image-proxy functionality, potentially exposing sensitiv...

4 min read read

CVE 2025-04-04

CVE-2025-2907: Unauthenticated Arbitrary Options Update in Order Delivery Date for WooCommerce

Unauthenticated Arbitrary Options Update in Order Delivery Date for WooCommerce

7 min read read

CVE 2025-03-27

CVE-2025-2294: Unauthenticated Local File Inclusion in Kubio AI Page Builder

Critical vulnerability affecting the Kubio AI Page Builder WordPress plugin

1 min read read

CVE 2025-03-20

CVE-2025-2539: Unauthenticated Arbitrary File Read in File Away

CVE-2025-2539 affects the File Away WordPress plugin through version 3.9.9.0.1. The vulnerability allows unauthenticated attackers to access arbitrary files on the server through an AJAX-based file operation.

4 min read read

CVE 2025-03-19

CVE-2025-4322: Unauthenticated Privilege Escalation via Password Update in Motors WordPress Theme

Critical vulnerability affecting the Motors – Car Dealer, Rental & Listing WordPress theme

7 min read read