Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Security Intel Hub 83301+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

254
Sources connected
135
Sources online now
627
New intel in 24h
83,301+
AI-processed intel
Continuous monitoring and AI processing Monitor intel
Explore All intel 🔗 Supply-chain reports 438 Structured malicious-package library
Examples: RCE · SSRF · GHSA · log4j
Filter
CVSS 6.4
WordPress Post Types Manager Arbitrary File Upload RCE (v4.0.2) with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves an **Arbitrary File Upload** flaw in the WordPress plugin **Post Types Manager** in versions **4.0.2 and below**. Attackers can craft specific re…

Read more
CVSS 6.4
WordPress Post Types Manager 4.0.4 Arbitrary File Upload RCE Vulnerability with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects **version 4.0.4 and earlier** of the WordPress plugin **Post Types Manager**, involving an **arbitrary file upload vulnerability**. Attackers can …

Read more
CVSS 6.4
WordPress post-origins 2.0.3 Arbitrary File Read Vulnerability with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in version `2.0.3` of the WordPress plugin `post-origins`. Attackers can exploit this vulnerability by sending requests to a specific URL to bypass…

Read more
CVSS 6.4
WordPress Post Types and Posts Manager Arbitrary File Upload RCE with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects version 4.0.2 and earlier of the WordPress plugin "Post Types and Posts Manager". Attackers can exploit this vulnerability to upload arbitrary fil…

Read more
CVSS 6.4
WordPress post-origins 2.0.3 Pre-Auth IDOR/PrivEsc with POC
plugins.trac.wordpress.org · 2026-10-28

### 漏洞概述 该漏洞存在于 WordPress 插件 `post-origins` 的 `2.0.3` 版本中。攻击者可以利用此漏洞，通过构造特定的请求，绕过权限检查，从而获取敏感信息或执行未授权的操作。 ### 影响范围 - **插件名称**: post-origins - **受影响版本**: 2.0.3 及更早版本 - **WordPress 版本**: 所有版本（只要安装了受影响的插件…

Read more
CVSS 6.4
WordPress Post Types Manager SQL Injection (post_type) with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves an **SQL injection** flaw in the WordPress plugin **Post Types Manager** in versions **4.0.2.4 and below**. Attackers can craft malicious request…

Read more
CVSS 4.4
glibc getaddrinfo Buffer Overflow Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `getaddrinfo` function in the `glibc` library, specifically located in the `nss/getaddrinfo.c` file. The vulnerability allows an attacker to t…

Read more
CVSS 6.4
WordPress post-origins Plugin SQL Injection (v4.2.3) Analysis & POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves an SQL injection flaw in the WordPress plugin `post-origins` affecting version 4.2.3 and earlier. Attackers can craft specific requests to exploi…

Read more
CVSS 6.4
WordPress CVE-2024-4576 Arbitrary File Read Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: CVE-2024-4576 - **Vulnerability Type**: Arbitrary File Read Vulnerability - **Vulnerability Description**: This vulnerability allows attackers to r…

Read more
CVSS 6.4
WooCommerce 2.3.0 Cookie Injection Vulnerability Analysis and Exploitation
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `includes/wc-notice-functions.php` file of the WooCommerce plugin, specifically within the `wc_clear_notices()` function. An attacker can ex…

Read more
CVSS 6.4
wp-easysocial WordPress Plugin SQL Injection Analysis and Fix
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview The screenshot depicts an SQL injection vulnerability in the WordPress plugin named `wp-easysocial`. The vulnerability is located near line 230 of the file `wp-content/plugi…

Read more
CVSS 4.4
WP-PostViews SQL Injection Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects multiple versions (1.3.1 and earlier) of the WordPress plugin "WP-PostViews" and involves an SQL injection flaw. Attackers can craft specific URL …

Read more
CVSS 4.4
WordPress Easy Content Elements SQL Injection (v3.1.0) Analysis & POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects multiple versions (3.1.0 and earlier) of the WordPress plugin "Easy Content Elements," involving an SQL injection flaw. Attackers can craft specif…

Read more
CVSS 6.4
Waitlist for WooCommerce XSS via unescaped container_class variable fix analysis
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability ID**: 3765571 - **Vulnerability Type**: Cross-Site Scripting (XSS) - **Affected File**: `waitlist-woocommerce/trunk/includes/xoo-wl-functions.php` - **Subm…

Read more
CVSS 4.4
CVE-2023-38148: Arbitrary File Download in WooCustomProductAddons with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This screenshot presents vulnerability information regarding the WordPress plugin `woo-custom-product-addons`. The vulnerability is identified as `CVE-2023-38148`, affecting…

Read more
CVSS 7.2
image-antispam Plugin SQL Injection in front_reassessment Function: Analysis and Exploit
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `front_reassessment` functionality of the `image-antispam` plugin, containing a SQL injection flaw. Attackers can craft specific URL parameter…

Read more
CVSS 7.2
Image Extensions Plugin LFI RCE Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `image-extensions/trunk/recommender-wordpress.php` file and manifests as a File Inclusion Vulnerability. Attackers can craft specific reques…

Read more
CVSS 4.4
Woo Custom Product Addons <= 3.5.9 Cart XSS Vulnerability Analysis and Fix
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Type**: Cross-Site Scripting (XSS) - **Affected File**: `woo-custom-product-addons/trunk/templates/cart/cart-item-data.php` - **Vulnerability Description**…

Read more
CVSS 7.2
image-antiporn Plugin: Local File Inclusion (LFI) to RCE in porn.php with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `porn.php` file of the `image-antiporn` plugin and constitutes a file inclusion vulnerability. Attackers can exploit this vulnerability by cr…

Read more
CVSS 7.2
CVE-2024-3823: AACO Commerce Event Pro Arbitrary File Inclusion RCE with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability ID**: CVE-2024-3823 - **Vulnerability Type**: Arbitrary File Inclusion - **Affected File**: `imga-eventpro/trunk/aacocommerce-event-pro.php` - **Vulnerabil…

Read more

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.