#exploit

CVE 2025-04-06

CVE-2025-3419: Unauthenticated Arbitrary File Read in Eventin

CVE-2025-3419 affects the Event Manager, Events Calendar, Tickets, Registrations – Eventin WordPress plugin through version 4.0.26. The vulnerability allows unauthenticated attackers to read arbitrary files from the server through the plugin's image-proxy functionality, potentially exposing sensitiv...

4 min read read

CVE 2025-04-04

CVE-2025-2907: Unauthenticated Arbitrary Options Update in Order Delivery Date for WooCommerce

Unauthenticated Arbitrary Options Update in Order Delivery Date for WooCommerce

7 min read read

CVE 2025-03-27

CVE-2025-2294: Unauthenticated Local File Inclusion in Kubio AI Page Builder

Critical vulnerability affecting the Kubio AI Page Builder WordPress plugin

1 min read read

CVE 2025-03-20

CVE-2025-2539: Unauthenticated Arbitrary File Read in File Away

CVE-2025-2539 affects the File Away WordPress plugin through version 3.9.9.0.1. The vulnerability allows unauthenticated attackers to access arbitrary files on the server through an AJAX-based file operation.

4 min read read

CVE 2025-03-19

CVE-2025-4322: Unauthenticated Privilege Escalation via Password Update in Motors WordPress Theme

Critical vulnerability affecting the Motors – Car Dealer, Rental & Listing WordPress theme

7 min read read

exploit 2024-11-21

Voyager Laravel: Authenticated Arbitrary Local File Download via Compass

The Voyager Laravel research repository documents an authenticated arbitrary local file download issue in the Compass tool. A user with valid administrative access can potentially abuse the file-download functionality to retrieve files outside the intended application scope.

4 min read read

exploit 2024-10-02

midia

MIDIA: Unrestricted File Upload / Arbitrary File Upload in a Laravel File Manager Package

7 min read read