Duplicator Directory Traversal Vulnerability (CVE-2020-11738): High Severity
Understanding the Duplicator Directory Traversal Vulnerability The Duplicator plugin for WordPress, a popular tool for website migration and backups, was found to have a…
Ucartz Updates
Security & Release Updates
Vulnerability advisories and release notes for the hosting, server and automation software we run: what changed, who is affected and how to stay safe.
Use Any Font Stored Cross-Site Scripting Vulnerability (CVE-2021-24977): High Severity
A serious security flaw has been found in the popular “Use Any Font | Custom Font Uploader” plugin for WordPress. This vulnerability, identified as…
Responsive Filterable Portfolio SQL Injection Vulnerability (CVE-2019-25221): Medium Severity
The digital world thrives on dynamic websites, many of which rely on powerful content management systems like WordPress. While these platforms offer incredible flexibility…
Xylus Themes WP Smart Import Cross-Site Scripting Vulnerability (CVE-2024-32597): Medium Severity
The Xylus Themes WP Smart Import plugin for WordPress has a security flaw known as Cross-Site Scripting (XSS). This vulnerability, identified as CVE-2024-32597, could…
ThemeHunk Vayu Blocks Cross-Site Scripting Vulnerability (CVE-2025-22644): Medium Severity
Understanding the Cross-Site Scripting Vulnerability in ThemeHunk Vayu Blocks A security flaw has been identified in the ThemeHunk Vayu Blocks plugin for WordPress and…
Advance WordPress Search Plugin Broken Authentication Vulnerability (CVE-2022-40218): Medium Severity
Unauthenticated Plugin Settings Change in Advance WordPress Search Plugin A significant security flaw has been found in the Advance WordPress Search Plugin, identified as…
Quiz and Survey Master Unauthorized Access and Data Modification Vulnerability (CVE-2025-9637): Medium Severity
A significant security flaw has been found in the Quiz and Survey Master (QSM) plugin for WordPress. This vulnerability, identified as CVE-2025-9637, could allow…
Quiz and Survey Master SQL Injection Vulnerability (CVE-2025-9318): Medium Severity
The Quiz and Survey Master (QSM) plugin for WordPress is a popular tool for creating interactive quizzes and surveys. However, a significant security flaw…
Ninja Forms Unauthenticated Access Token Vulnerability (CVE-2025-14072): Medium Severity
The Ninja Forms plugin, a widely-used tool for creating diverse forms on WordPress websites, has recently been found to have a critical security flaw.…
Quiz and Survey Master Unauthorized Data Loss Vulnerability (CVE-2025-9294): Medium Severity
Understanding the Vulnerability The Quiz and Survey Master (QSM) plugin for WordPress, a popular tool for creating interactive quizzes and surveys, has been found…
Xylus Themes WP Smart Import Cross-Site Scripting Vulnerability (CVE-2024-30201): High Severity
Understanding the WP Smart Import Cross-Site Scripting Vulnerability A significant security flaw, identified as CVE-2024-30201, has been found in the Xylus Themes WP Smart…
Super Testimonials Stored Cross-Site Scripting Vulnerability (CVE-2024-13704): High Severity
The Super Testimonials plugin for WordPress, a popular tool for showcasing client feedback, was found to have a serious security flaw. This vulnerability, known…
Start Building Today
Ready to Get Started?
VPS, dedicated servers, streaming and managed hosting with 24/7 support from the Ucartz team.