CVE-2025-8420 – WordPress Request a Quote Form Plugin Remote Code Execution Vulnerability

August 6, 2025

CVE ID : CVE-2025-8420

Published : Aug. 6, 2025, 3:15 a.m. | 20 hours, 29 minutes ago

Description : The Request a Quote Form plugin for WordPress is vulnerable to Remote Code Execution in version less than, or equal to, 2.5.2 via the emd_form_builder_lite_pagenum function. This is due to the plugin not properly validating user input before using it as a function name. This makes it possible for unauthenticated attackers to execute code on the server, however, parameters can not be passed to the functions called.

Severity: 8.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-6994 – Smartdatasoft WordPress Reveal Listing Plugin Privilege Escalation

Next Article CVE-2025-54634 – KVM Huge Page Separation Abnormal Condition Processing Vulnerability

Highlights

CVE-2025-52950 – Juniper Networks Security Director Missing Authorization Vulnerability

July 11, 2025

CVE ID : CVE-2025-52950

Published : July 11, 2025, 3:15 p.m. | 4 hours, 59 minutes ago

Description : A Missing Authorization vulnerability in Juniper Networks Security Director allows an unauthenticated network-based attacker to read or tamper with multiple sensitive resources via the web interface.

Numerous endpoints on the Juniper Security Director appliance do not validate authorization and will deliver information to the caller that is outside their authorization level. An attacker can access data that is outside the user’s authorization level. The information obtained can be used to gain access to additional information or perpetrate other attacks, impacting downstream managed devices.

This issue affects Security Director version 24.4.1.

Severity: 9.6 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

I’ve fallen hard for Starsand Island, a promising anime-style life sim bringing Ghibli vibes to Xbox and PC later this year

June 2, 2025

CVE-2025-45986 – Blink Command Injection Vulnerability in Router SetMacBlack Function

June 13, 2025

NotebookLM now lets you chat with expert guides from top publishers, and Shakespeare – here’s how

July 15, 2025

Error’d: You Talkin’ to Me?

The Psychology Of Trust In AI: A Guide To Measuring And Designing For User Confidence

This week in AI updates: OpenAI Codex updates, Claude integration in Xcode 26, and more (September 19, 2025)

Report: The major factors driving employee disengagement in 2025

DistroWatch Weekly, Issue 1140

Distribution Release: DietPi 9.17

Development Release: Zorin OS 18 Beta

Distribution Release: IPFire 2.29 Core 197

@ts-ignore is almost always the worst option

@ts-ignore is almost always the worst option

MutativeJS v1.3.0 is out with massive performance gains

Student Performance Prediction System using Python Machine Learning (ML)

DistroWatch Weekly, Issue 1140

DistroWatch Weekly, Issue 1140

Distribution Release: DietPi 9.17

Hyprland Made Easy: Preconfigured Beautiful Distros

CVE-2025-8420 – WordPress Request a Quote Form Plugin Remote Code Execution Vulnerability

Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories

Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass

CVE-2025-5330 – FreeFloat FTP Server RETR Command Handler Buffer Overflow Vulnerability

CVE-2025-4112 – PHPGurukul Student Record System SQL Injection Vulnerability

The Battlefield 6 PC system requirements are here in time for Open Beta, and they’re kind, too — here are the specs you’ll need to run the explosive FPS

CVE-2025-32963 – MinIO Operator STS Unauthenticated Kubernetes API Server Impersonation Vulnerability

CVE-2025-52950 – Juniper Networks Security Director Missing Authorization Vulnerability

I’ve fallen hard for Starsand Island, a promising anime-style life sim bringing Ghibli vibes to Xbox and PC later this year

CVE-2025-45986 – Blink Command Injection Vulnerability in Router SetMacBlack Function

NotebookLM now lets you chat with expert guides from top publishers, and Shakespeare – here’s how

CVE-2025-8420 – WordPress Request a Quote Form Plugin Remote Code Execution Vulnerability

Related Posts