Skip to main content
2025-05-30

2025-05-31

2025-06-01
All (2) Critical (2) High (3) Medium (32)
Newest CVSS EPSS Oldest
CVE-2025-4631 May 31, 07:15 CRITICAL This Week

The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the stocktend_object endpoint in versions 2.0.6.0 to 2.1.1.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Authentication Bypass Privilege Escalation
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2025-4607 May 31, 07:15 CRITICAL This Week

The PSW Front-end Login & Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12 via the customer_registration() function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Privilege Escalation
NVD
CVSS 3.1
9.8
EPSS
1.1%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy