plugins // Plugins security extend, not erode! September 22, 2020Ninja Forms before 3.4.27.1 simple CSRF to RCEAugust 25, 2020WooCommerce before 4.1.0 Remote Code ExecutionAugust 11, 2020WordPress protected meta via wp job managerAugust 9, 2020WordPress attachment api functions and any post typeJuly 27, 2020WordPress and multiple maybe_unserializeJuly 25, 2020WordPress core and MySQL string comparisonJuly 23, 2020WordPress importer arbitrary post createJuly 21, 2020LearnPress SQLi to RCEJuly 18, 2020WooCommerce MySQL replace to RCEJuly 17, 2020WordPress importer and attached file