API - API Security Blog

CVE-2025-50200 RabbitMQ Node can log Basic Auth header from an HTTP request

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic ...

June 19, 2025

Wordfence Intelligence Weekly WordPress Vulnerability Report (June 9, 2025 to June 15, 2025)

Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Thr ...

June 19, 2025

CVE-2025-6266

creation_timestamp| type| source ---|---|--- 2025-06-19 14:03:33+00:00| seen|...Read More ...

June 19, 2025

CVE-2025-6374

creation_timestamp| type| source ---|---|--- 2025-06-19 14:05:09+00:00| seen|...Read More ...

June 19, 2025

WordPress Oganro Travel Portal Search Widget for HotelBeds APITUDE API Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Oganro Travel Portal Search Widget for HotelBeds APITUDE API Type Plugin Vulnerable versions <= 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Req ...

June 19, 2025

Exploit for Missing Authentication for Critical Function in Langflow

CVE-2025-3248 — Langflow RCE Exploit Remote Code Execution (RCE) exploit for Langflow applications vulnerable to CVE-2025-3248. Affected Endpoint: /api/v1/validate/code 🚀 Exploit Features � ...

June 19, 2025

CVE-2025-5234

creation_timestamp| type| source ---|---|--- 2025-06-19 13:48:32+00:00| seen|...Read More ...

June 19, 2025

CVE-2025-4738

creation_timestamp| type| source ---|---|--- 2025-06-19 13:43:31+00:00| seen|...Read More ...

June 19, 2025