API - API Security Blog

CVE-2022-49047

creation_timestamp| type| source ---|---|--- 2025-08-16 01:45:15+00:00| seen|...Read More ...

August 16, 2025

CVE-2025-7441 StoryChief <= 1.0.42 – Unauthenticated Arbitrary File Upload

The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.42. This vulnerability occurs through the /wp-json/storychief/webhook REST-API end ...

August 16, 2025

CVE-2025-7441 StoryChief <= 1.0.42 – Unauthenticated Arbitrary File Upload

The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.42. This vulnerability occurs through the /wp-json/storychief/webhook REST-API end ...

August 16, 2025

CVE-2025-7664 Al Pack <= 1.0.2 – Missing Authorization to Unauthenticated Premium Feature Activation via check_activate_permission Function

The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the check_activate_permission() permission callback for the /wp-json/presslearn/v1/activate R ...

August 16, 2025

CVE-2025-7664 Al Pack <= 1.0.2 – Missing Authorization to Unauthenticated Premium Feature Activation via check_activate_permission Function

The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the check_activate_permission() permission callback for the /wp-json/presslearn/v1/activate R ...

August 16, 2025

CVE-2025-8959

creation_timestamp| type| source ---|---|--- 2025-08-16 00:47:26+00:00| seen|...Read More ...

August 16, 2025

CVE-2025-9060

creation_timestamp| type| source ---|---|--- 2025-08-16 01:31:44+00:00| seen|...Read More ...

August 16, 2025

CVE-2025-44201

creation_timestamp| type| source ---|---|--- 2025-08-16 00:32:23+00:00| seen|...Read More ...

August 16, 2025