Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Security Intel Hub 83334+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

254
Sources connected
135
Sources online now
582
New intel in 24h
83,334+
AI-processed intel
Continuous monitoring and AI processing Monitor intel
Explore All intel 🔗 Supply-chain reports 438 Structured malicious-package library
Examples: RCE · SSRF · GHSA · log4j
Filter
CVSS 6.4
WordPress post-origins Plugin SQL Injection (v4.2.3) Analysis & POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves an SQL injection flaw in the WordPress plugin `post-origins` affecting version 4.2.3 and earlier. Attackers can craft specific requests to exploi…

Read more
CVSS 6.4
WordPress CVE-2024-4576 Arbitrary File Read Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: CVE-2024-4576 - **Vulnerability Type**: Arbitrary File Read Vulnerability - **Vulnerability Description**: This vulnerability allows attackers to r…

Read more
CVSS 6.4
WooCommerce 2.3.0 Cookie Injection Vulnerability Analysis and Exploitation
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `includes/wc-notice-functions.php` file of the WooCommerce plugin, specifically within the `wc_clear_notices()` function. An attacker can ex…

Read more
CVSS 6.4
wp-easysocial WordPress Plugin SQL Injection Analysis and Fix
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview The screenshot depicts an SQL injection vulnerability in the WordPress plugin named `wp-easysocial`. The vulnerability is located near line 230 of the file `wp-content/plugi…

Read more
CVSS 4.4
WP-PostViews SQL Injection Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects multiple versions (1.3.1 and earlier) of the WordPress plugin "WP-PostViews" and involves an SQL injection flaw. Attackers can craft specific URL …

Read more
CVSS 4.4
WordPress Easy Content Elements SQL Injection (v3.1.0) Analysis & POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects multiple versions (3.1.0 and earlier) of the WordPress plugin "Easy Content Elements," involving an SQL injection flaw. Attackers can craft specif…

Read more
CVSS 6.4
Waitlist for WooCommerce XSS via unescaped container_class variable fix analysis
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability ID**: 3765571 - **Vulnerability Type**: Cross-Site Scripting (XSS) - **Affected File**: `waitlist-woocommerce/trunk/includes/xoo-wl-functions.php` - **Subm…

Read more
CVSS 4.4
CVE-2023-38148: Arbitrary File Download in WooCustomProductAddons with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This screenshot presents vulnerability information regarding the WordPress plugin `woo-custom-product-addons`. The vulnerability is identified as `CVE-2023-38148`, affecting…

Read more
CVSS 7.2
image-antispam Plugin SQL Injection in front_reassessment Function: Analysis and Exploit
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `front_reassessment` functionality of the `image-antispam` plugin, containing a SQL injection flaw. Attackers can craft specific URL parameter…

Read more
CVSS 7.2
Image Extensions Plugin LFI RCE Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `image-extensions/trunk/recommender-wordpress.php` file and manifests as a File Inclusion Vulnerability. Attackers can craft specific reques…

Read more
CVSS 4.4
Woo Custom Product Addons <= 3.5.9 Cart XSS Vulnerability Analysis and Fix
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Type**: Cross-Site Scripting (XSS) - **Affected File**: `woo-custom-product-addons/trunk/templates/cart/cart-item-data.php` - **Vulnerability Description**…

Read more
CVSS 7.2
image-antiporn Plugin: Local File Inclusion (LFI) to RCE in porn.php with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `porn.php` file of the `image-antiporn` plugin and constitutes a file inclusion vulnerability. Attackers can exploit this vulnerability by cr…

Read more
CVSS 7.2
CVE-2024-3823: AACO Commerce Event Pro Arbitrary File Inclusion RCE with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability ID**: CVE-2024-3823 - **Vulnerability Type**: Arbitrary File Inclusion - **Affected File**: `imga-eventpro/trunk/aacocommerce-event-pro.php` - **Vulnerabil…

Read more
Premium intel
CVSS 8.8
Typo3 Backend ModuleController Unauth Access: Bypass Permission Check
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `typo3/sysext/backend/Classes/Controller/ModuleController.php` file within `typo3`, specifically in the `doModule()` method. An attacker can…

Read more
Premium intel
CVSS 8.8
SubmissionManager Plugin 1.5.1 RCE via eval() in processSubmission() with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `SubmissionManagerSubmission.php` file of the `SubmissionManager` plugin, specifically within the `processSubmission()` method. Attackers ca…

Read more
Premium intel
CVSS 8.8
Yoast SEO 1.5.1 RCE via functions.php with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects multiple versions of the WordPress plugin "Yoast SEO," specifically the `functions.php` file in version 1.5.1. It allows attackers to execute arbi…

Read more
Premium intel
CVSS 9.8
Highrise Plugin mail-merge.php SQL Injection Vulnerability with POC Exploit
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `include/mail-merge.php` file within the `highrise` plugin and contains an SQL injection flaw. Attackers can craft specific request parameter…

Read more
Premium intel
CVSS 9.8
Highrise Plugin SQL Injection in mail-merging.php: Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `include/mail-merging.php` file of the `highrise` plugin and contains a SQL injection flaw. Attackers can craft specific request parameters t…

Read more
CVSS 6.4
django-extensions runserver_plus Arbitrary File Read via --reload (POC)
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `runserver_plus` command in the `django-extensions` library. When used with the `--reload` parameter, it allows arbitrary file reading. Attack…

Read more
CVSS 6.4
WooCommerce wc-coupon.php SQL Injection Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `wc-coupon.php` file in version 2.4.0 and earlier of the WordPress plugin "WooCommerce". Attackers can craft specific URL requests to exploit …

Read more

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.