Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Security Intel Hub 83334+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

254
Sources connected
135
Sources online now
582
New intel in 24h
83,334+
AI-processed intel
Continuous monitoring and AI processing Monitor intel
Explore All intel 🔗 Supply-chain reports 438 Structured malicious-package library
Examples: RCE · SSRF · GHSA · log4j
Filter
Premium intel
CVSS 9.8
WordPress Contact Manager Plugin SQL Injection Vulnerability Analysis and Remediation
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects versions `contact-manager/tags/1.2` through `contact-manager/tags/1.3.1` of the WordPress plugin `contact-manager`. The specific affected file is …

Read more
CVSS 6.4
document-embedder < 1.4.0 XSS Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a security flaw in the `document-embedder` package in versions prior to 1.4.0. Specifically, when processing HTML content containing specific mal…

Read more
CVSS 6.4
WordPress document-embedder plugin XSS via unfiltered 'url' parameter (CWE-79)
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `document-embedder.php` file of the WordPress plugin `document-embedder`. The vulnerability type is **Cross-Site Scripting (XSS)**, specific…

Read more
CVSS 6.4
WordPress Plugin Unauthorized Access Vulnerability Analysis with POC
wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: Unauthorized Access Vulnerability - **Vulnerability Description**: This vulnerability allows unauthorized users to access sensitive information thr…

Read more
CVSS 6.4
Apache OpenNLP CVE-2024-38378 RCE Vulnerability Analysis and POC
github.com · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: CVE-2024-38378 - **Vulnerability Type**: Remote Code Execution (RCE) - **Affected Component**: Apache OpenNLP - **Vulnerability Description**: A vu…

Read more
CVSS 6.4
Your Booking Manager XSS via Shortcode: Analysis, POC, and Fix
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability ID**: 3757674 - **Vulnerability Type**: Cross-Site Scripting (XSS) - **Affected File**: `your-booking-manager/trunk/inc/TBIM_Shortcodes.php` - **Vulnerabil…

Read more
CVSS 6.4
ClassicPress SQL Injection (CVE-2017-14658) Analysis with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability ID**: CVE-2017-14658 - **Vulnerability Type**: SQL Injection - **Affected File**: `classicsvc.php` - **Vulnerability Description**: An SQL injection vulner…

Read more
CVSS 6.4
libxml2 xmlSAX2ParseFile Stack Overflow RCE Vulnerability Analysis with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `do_get_posts` function in the `includes/elements.php` file of the WordPress plugin "Elementor". Attackers can craft specific request paramet…

Read more
CVSS 6.4
Elementor Plugin RCE Vulnerability Analysis with POC and Exploit Code
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `get_group_type` function within the `includes/elements.php` file of the WordPress plugin "Elementor". Attackers can exploit a logic flaw in t…

Read more
CVSS 6.4
uchemy Plugin v5.4.0- XSS Vulnerability: POC, Analysis, and Fix
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability ID**: 3754873 - **Vulnerability Type**: Cross-Site Scripting (XSS) - **Affected File**: `class-uchemy-composer-widget.php` - **Vulnerability Description**:…

Read more
CVSS 6.4
Elementor Plugin RCE Vulnerability Analysis and POC Code
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `get_group_type` function in the `includes/elements.php` file of the WordPress plugin "Elementor". Attackers can exploit a logic flaw in this…

Read more
CVSS 4.3
WordPress WP-PageNavi SQL Injection Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a function named `vuln`, which contains a security flaw when processing user input. Specifically, the `vuln` function fails to perform adequate v…

Read more
CVSS 4.3
Arbitrary File Write & Path Traversal in vuln: POC & Fix
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a function named `vuln`, which contains a security flaw when processing user input. Specifically, the `vuln` function fails to perform adequate v…

Read more
CVSS 4.3
WordPress related-posts-for-wp v3.0.0 RCE via Missing Permission Check with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects version `3.0.0` of the WordPress plugin `related-posts-for-wp`, specifically the file `Admin/Metabox/Metabox.php`. The vulnerability allows attack…

Read more
CVSS 4.3
WordPress WP-PageNavi 3.8.8.1 Unfiltered POST Parameter RCE Vulnerability with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `xmlSAX2ParseFile` function in the `libxml2` library. When parsing XML files containing specific structures, it may lead to a stack overflow. …

Read more
CVSS 4.3
libxml2 Buffer Overflow RCE Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a security flaw in the `libxml2` library when processing XML documents. Specifically, when parsing XML documents containing specially crafted con…

Read more
CVSS 4.3
WordPress WP-PageNavi SQL Injection Vulnerability with POC Code
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: Arbitrary File Upload Vulnerability - **Vulnerability Type**: File Upload Vulnerability - **Vulnerability Description**: Under specific conditions,…

Read more
CVSS 4.3
SQL Injection in WP-PageNavi v3.5.3: Exploit Analysis & POC
plugins.trac.wordpress.org · 2026-10-28

### 漏洞概述 该漏洞涉及WordPress插件“WP-PageNavi”在版本3.5.0及更早版本中存在一个SQL注入漏洞。攻击者可以通过构造特定的URL请求，利用该漏洞执行任意SQL命令，从而可能获取敏感数据、修改数据库内容或完全控制网站。 ### 影响范围 - **受影响插件**: WP-PageNavi - **受影响版本**: 3.5.0及更早版本 - **受影响平台**: WordP…

Read more
CVSS 4.3
libxml2 xmlParseDocument Stack Overflow RCE Analysis with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a security flaw in the "WooCommerce" WordPress plugin in version 3.8.0 and earlier. Attackers can exploit this vulnerability by injecting malicio…

Read more
CVSS 4.3
3.5714dm LinkScreen XSS Vulnerability Analysis and Fix POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Type**: Cross-Site Scripting (XSS) - **Vulnerability Description**: An XSS vulnerability exists in the `wp/trunk/3.5714dm/LinkScreen/Page.php` file, allowi…

Read more

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.