Category - API Security Blog

Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Thre ...

July 17, 2025

CVE-2024-33832

creation_timestamp| type| source ---|---|--- 2025-07-17 11:51:46+00:00| confirmed|...Read More ...

July 17, 2025

CVE-2024-36675

creation_timestamp| type| source ---|---|--- 2025-07-17 11:50:29+00:00| confirmed|...Read More ...

July 17, 2025

Fastify: Remote Code Execution via unsafe usage of `reply.view({ raw })` in @fastify/view (EJS template engine)

The @fastify/view plugin, when used with the EJS engine and the reply.view({ raw: <user-controlled-string> }) pattern, allowed arbitrary EJS execution. This vulnerability arose from the ...

July 17, 2025