Qwibbs
- Wordpress Alert: Unauthorized post publication
- Wordpress Alert: Unauthorized plugin activation
- Wordpress Alert: Unauthenticated REST endpoint access
- Wordpress Alert: Unauthenticated arbitrary file upload
- Wordpress Alert: Two-factor authentication bypass in plugins
- Wordpress Alert: Subscription ownership bypass
- Wordpress Alert: Subscriber-to-administrator privilege
- Wordpress Alert: Stored cross-site scripting in shortcodes
- Wordpress Alert: Stored cross-site scripting in profiles
- Wordpress Alert: Stored cross-site scripting in comments
- Wordpress Alert: Stored cross-site scripting in block
- Wordpress Alert: Stolen administrator session cookies
- Wordpress Alert: Staging-to-production credential reuse
- Wordpress Alert: SQL injection in sorting parameters
- Wordpress Alert: SQL injection in search filters
- Wordpress Alert: SQL injection in reporting dashboards
- Wordpress Alert: SQL injection in form plugins
- Wordpress Alert: SQL injection in booking plugins
- Wordpress Alert: Session fixation
- Wordpress Alert: Spreadsheet formula injection in exported
- Wordpress Alert: Server-side template injection
- Wordpress Alert: Server-side request forgery in URL preview
- Wordpress Alert: REST batch-route confusion leading to code
- Wordpress Alert: Server-side request forgery in import tools
- Wordpress Alert: REST API privilege escalation