Qwibbs
- Wordpress Alert: Insecure file permissions
- Wordpress Alert: Insecure direct object references in
- Wordpress Alert: Gift-card balance manipulation
- Wordpress Alert: Exposed wp-config.php backups
- Wordpress Alert: Form submission data leakage
- Wordpress Alert: Exposed migration archives
- Wordpress Alert: Exposed custom REST routes
- Wordpress Alert: Exposed API keys in plugin settings
- Wordpress Alert: Executable files disguised as images
- Wordpress Alert: Event-registration data exposure
- Wordpress Alert: Email-header injection in contact forms
- Wordpress Alert: Draft content disclosure
- Wordpress Alert: DOM-based cross-site scripting in page
- Wordpress Alert: Database administration panels left exposed
- Wordpress Alert: Customer data disclosure
- Wordpress Alert: Cross-site request forgery against user
- Wordpress Alert: Cross-site request forgery against settings
- Wordpress Alert: Cross-site contamination on shared hosting
- Wordpress Alert: Coupon creation without authorization
- Wordpress Alert: Contributor-to-editor privilege escalation
- Wordpress Alert: Core facilitated SQL injection
- Wordpress Alert: Contact-form attachment disclosure
- Wordpress Alert: Compromised third-party plugin updates
- Wordpress Alert: Command injection in backup tools
- Wordpress Alert: Clickjacking of administrative actions