CVE-2025-9331 – Spacious WordPress Cross-Site Request Forgery (CSRF) and Authentication Bypass

CVE ID : CVE-2025-9331 Published : Aug. 22, 2025, 12:15 p.m. | 47 minutes ago Description : The Spacious theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ‘welcome_notice_import_handler’ function in all versions up to, and including, 1.9.11. This makes it possible for authenticated attackers, with Subscriber-level […]

CVE-2025-9258 – Uniong WebITR Arbitrary File Reading Vulnerability

The following table lists the changes that have been made to the CVE-2025-9258 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Aug. 22, 2025 Action […]

CVE-2025-9257 – Uniong WebITR Arbitrary File Reading Vulnerability

The following table lists the changes that have been made to the CVE-2025-9257 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Aug. 22, 2025 Action […]

CVE-2025-9256 – Uniong WebITR Arbitrary File Reading Vulnerability

The following table lists the changes that have been made to the CVE-2025-9256 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Aug. 22, 2025 Action […]

CVE-2025-9255 – Uniong WebITR SQL Injection

The following table lists the changes that have been made to the CVE-2025-9255 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Aug. 22, 2025 Action […]

CVE-2025-9259 – Uniong WebITR Arbitrary File Reading Vulnerability

The following table lists the changes that have been made to the CVE-2025-9259 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Aug. 22, 2025 Action […]

CVE-2025-9254 – Uniong WebITR Authentication Bypass

The following table lists the changes that have been made to the CVE-2025-9254 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Aug. 22, 2025 Action […]

CVE-2025-57896 – Church Admin Missing Authorization Vulnerability

The following table lists the changes that have been made to the CVE-2025-57896 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Aug. 22, 2025 Action […]

CVE-2025-57895 – JobWP CSRF Vulnerability

The following table lists the changes that have been made to the CVE-2025-57895 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Aug. 22, 2025 Action […]

CVE-2025-57894 – WPPizza Missing Authorization Vulnerability

The following table lists the changes that have been made to the CVE-2025-57894 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Aug. 22, 2025 Action […]