Latest Stories
Unauthenticated Data Exposure in YM SSO Login | CVE202510648 | 2025-10-15
Mitigation guide for CVE-2025-10648 YourMembership SSO WordPress vulnerability and WAF protection
Authenticated Contributor Stored XSS in Shortcode Button | CVE202510194 | 2025-10-15
WordPress CVE-2025-10194 Shortcode Button stored XSS: detection, remediation, and defense
Critical CSRF Vulnerability in Theme Importer | CVE202510312 | 2025-10-15
WordPress Theme Importer CSRF CVE-2025-10312 risk and practical mitigations for admins
Editor Level SQL Injection in onOffice Plugin | CVE202510045 | 2025-10-15
Authenticated SQL injection CVE-2025-10045 in onOffice for WP-Websites <=5.7; detection, mitigation, WP-Firewall protection.






















