Qwibbs
- Wordpress Alert: REST API object authorization bypass
- Wordpress Alert: REST API mass assignment
- Wordpress Alert: Remote file inclusion in plugins
- Wordpress Alert: Reflected cross-site scripting in search
- Wordpress Alert: Publicly accessible database backups
- Wordpress Alert: Public .git directories
- Wordpress Alert: Public debug logs containing secrets
- Wordpress Alert: Private post access bypass
- Wordpress Alert: PHP object injection through unsafe
- Wordpress Alert: PHP execution inside upload directories
- Wordpress Alert: Payment status spoofing
- Wordpress Alert: Password spraying against WordPress logins
- Wordpress Alert: Password-reset link disclosure
- Wordpress Alert: Paid-download authorization bypass
- Wordpress Alert: Outdated PHP runtime vulnerabilities
- Wordpress Alert: Page-template local file inclusion
- Wordpress Alert: Order record access bypass
- Wordpress Alert: OAuth account-linking flaws
- Wordpress Alert: Multisite tenant isolation bypass
- Wordpress Alert: Membership access bypass
- Wordpress Alert: Media-library access bypass
- Wordpress Alert: Malicious redirects through open-redirect
- Wordpress Alert: Local file inclusion in themes
- Wordpress Alert: Malicious nulled themes or plugins
- Wordpress Alert: LMS course access bypass