Latest Stories
StoreEngine Authenticated Arbitrary File Upload Vulnerability | CVE20259216 | 2025-09-16
Urgent guide to mitigating StoreEngine CVE-2025-9216 arbitrary file upload on WordPress sites
Critical Subscriber Arbitrary File Download in StoreEngine | CVE20259215 | 2025-09-17
StoreEngine CVE-2025-9215 arbitrary file download risk in WordPress; urgent patch, WAF guidance.
WordPress Plugin CSRF Enables Arbitrary Directory Deletion | CVE202510188 | 2025-09-16
CVE-2025-10188 CSRF vulnerability in WordPress The Hack Repair Guy Plugin Archiver; update to 3.1.1.
Authenticated Stored XSS in Productive Style Plugin | CVE20258394 | 2025-09-16
Urgent WordPress Productive Style stored XSS CVE-2025-8394 update to 1.1.25 and hardening tips
				





















