CVE-2025-0168 - Critical SQL Injection in Job Recruitment 1.’s Feedback System (`/_parse/_feedback_system.php`)
A new critical vulnerability has shaken the world of PHP recruitment platforms in mid-2024. CVE-2025-0168 affects the open source project Job Recruitment 1. by code-projects.
CVE-2024-56046 - Exploiting WPLMS Unrestricted File Upload to Deploy a Web Shell
CVE-2024-56046 is a newly disclosed vulnerability affecting the popular WordPress plugin VibeThemes WPLMS, specifically in versions up to and including 1.9.9. This issue
CVE-2023-50850 - How a Missing Authorization Vulnerability in WooCommerce Subscriptions Could Expose Your Shop
Online stores rely heavily on plugins to enhance their e-commerce features. WooCommerce Subscriptions is one of the most popular plugins for adding subscription functionality to
CVE-2024-12856 - Remote OS Command Injection in Four-Faith F3x24 & F3x36 Routers Dissected
The world of network hardware often flies under the radar, but it’s a gold mine for attackers targeting devices left in the wild with
CVE-2024-11921 - Exploiting Reflected XSS in GiveWP WordPress Plugin < 3.19.
> Summary:
GiveWP, a popular WordPress donation plugin, had a dangerous security flaw (CVE-2024-11921) in versions before 3.19.. This bug allowed reflected Cross-Site Scripting
Episode
00:00:00
00:00:00