Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

Security Intel Hub 83420+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

254

Sources connected

135

Sources online now

602

New intel in 24h

83,420+

AI-processed intel

Continuous monitoring and AI processing Monitor intel

Explore All intel 🔗 Supply-chain reports 438 Structured malicious-package library

Filter

KEV only

Verified PoC

Premium intel

CVSS 8.8

SubmissionManager Plugin 1.5.1 RCE via eval() in processSubmission() with POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `SubmissionManagerSubmission.php` file of the `SubmissionManager` plugin, specifically within the `processSubmission()` method. Attackers ca…

Premium intel

CVSS 8.8

Yoast SEO 1.5.1 RCE via functions.php with POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects multiple versions of the WordPress plugin "Yoast SEO," specifically the `functions.php` file in version 1.5.1. It allows attackers to execute arbi…

Premium intel

CVSS 9.8

Highrise Plugin mail-merge.php SQL Injection Vulnerability with POC Exploit

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `include/mail-merge.php` file within the `highrise` plugin and contains an SQL injection flaw. Attackers can craft specific request parameter…

Premium intel

CVSS 9.8

Highrise Plugin SQL Injection in mail-merging.php: Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `include/mail-merging.php` file of the `highrise` plugin and contains a SQL injection flaw. Attackers can craft specific request parameters t…

CVSS 6.4

django-extensions runserver_plus Arbitrary File Read via --reload (POC)

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `runserver_plus` command in the `django-extensions` library. When used with the `--reload` parameter, it allows arbitrary file reading. Attack…

CVSS 6.4

WooCommerce wc-coupon.php SQL Injection Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `wc-coupon.php` file in version 2.4.0 and earlier of the WordPress plugin "WooCommerce". Attackers can craft specific URL requests to exploit …

Premium intel

CVSS 9.8

WordPress Contact Manager Plugin SQL Injection Vulnerability Analysis and Remediation

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects versions `contact-manager/tags/1.2` through `contact-manager/tags/1.3.1` of the WordPress plugin `contact-manager`. The specific affected file is …

CVSS 6.4

document-embedder < 1.4.0 XSS Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a security flaw in the `document-embedder` package in versions prior to 1.4.0. Specifically, when processing HTML content containing specific mal…

CVSS 6.4

WordPress document-embedder plugin XSS via unfiltered 'url' parameter (CWE-79)

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `document-embedder.php` file of the WordPress plugin `document-embedder`. The vulnerability type is **Cross-Site Scripting (XSS)**, specific…

CVSS 6.4

WordPress Plugin Unauthorized Access Vulnerability Analysis with POC

wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: Unauthorized Access Vulnerability - **Vulnerability Description**: This vulnerability allows unauthorized users to access sensitive information thr…

CVSS 6.4

Apache OpenNLP CVE-2024-38378 RCE Vulnerability Analysis and POC

github.com · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: CVE-2024-38378 - **Vulnerability Type**: Remote Code Execution (RCE) - **Affected Component**: Apache OpenNLP - **Vulnerability Description**: A vu…

CVSS 6.4

Your Booking Manager XSS via Shortcode: Analysis, POC, and Fix

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability ID**: 3757674 - **Vulnerability Type**: Cross-Site Scripting (XSS) - **Affected File**: `your-booking-manager/trunk/inc/TBIM_Shortcodes.php` - **Vulnerabil…

CVSS 6.4

ClassicPress SQL Injection (CVE-2017-14658) Analysis with POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability ID**: CVE-2017-14658 - **Vulnerability Type**: SQL Injection - **Affected File**: `classicsvc.php` - **Vulnerability Description**: An SQL injection vulner…

CVSS 6.4

libxml2 xmlSAX2ParseFile Stack Overflow RCE Vulnerability Analysis with POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `do_get_posts` function in the `includes/elements.php` file of the WordPress plugin "Elementor". Attackers can craft specific request paramet…

CVSS 6.4

Elementor Plugin RCE Vulnerability Analysis with POC and Exploit Code

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `get_group_type` function within the `includes/elements.php` file of the WordPress plugin "Elementor". Attackers can exploit a logic flaw in t…

CVSS 6.4

uchemy Plugin v5.4.0- XSS Vulnerability: POC, Analysis, and Fix

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability ID**: 3754873 - **Vulnerability Type**: Cross-Site Scripting (XSS) - **Affected File**: `class-uchemy-composer-widget.php` - **Vulnerability Description**:…

CVSS 6.4

Elementor Plugin RCE Vulnerability Analysis and POC Code

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `get_group_type` function in the `includes/elements.php` file of the WordPress plugin "Elementor". Attackers can exploit a logic flaw in this…

CVSS 4.3

WordPress WP-PageNavi SQL Injection Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a function named `vuln`, which contains a security flaw when processing user input. Specifically, the `vuln` function fails to perform adequate v…

CVSS 4.3

Arbitrary File Write & Path Traversal in vuln: POC & Fix

plugins.trac.wordpress.org · 2026-10-28

CVSS 4.3

WordPress related-posts-for-wp v3.0.0 RCE via Missing Permission Check with POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects version `3.0.0` of the WordPress plugin `related-posts-for-wp`, specifically the file `Admin/Metabox/Metabox.php`. The vulnerability allows attack…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.