API - API Security Blog

CVE-2015-6176

creation_timestamp| type| source ---|---|--- 2025-07-23 21:02:18+00:00| seen|...Read More ...

July 24, 2025

CVE-2010-10012

creation_timestamp| type| source ---|---|--- 2025-07-23 14:05:23+00:00| seen|...Read More ...

July 24, 2025

CVE-2016-15044

creation_timestamp| type| source ---|---|--- 2025-07-24 00:38:36+00:00| seen|...Read More ...

July 24, 2025

CISO Spotlight: Andrew Storms on Trust, AI, and Why CISOs Need to Be Optimists

Andrew Storms, VP of Security at Replicated, has spent three decades on the frontlines of cybersecurity. From building Unix systems in the early ‘90s to leading incident response and AI security str ...

July 24, 2025

CVE-2025-7695 Dataverse Integration 2.77 – 2.81 – Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via reset_password_link REST Route

The Dataverse Integration plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks within its reset_password_link REST endpoint in versions 2.77 through 2.81. The ...

July 24, 2025

CVE-2025-7780 Ai Engine <= 2.9.4 – Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions

The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTranscribeAudio endpoint fails to restrict URL schemes before ...

July 24, 2025

CVE-2025-7780 Ai Engine <= 2.9.4 – Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions

The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTranscribeAudio endpoint fails to restrict URL schemes before ...

July 24, 2025

CVE-2025-7695 Dataverse Integration 2.77 – 2.81 – Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via reset_password_link REST Route

The Dataverse Integration plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks within its reset_password_link REST endpoint in versions 2.77 through 2.81. The ...

July 24, 2025