Public vulnerability records from Green Hat Security research and coordinated disclosure.
Each advisory documents an independently verified security issue after public disclosure and connects affected products, versions, remediation guidance, researcher credit, and primary references. No login or account is required.
Cross-site request forgery in the WP Umbrella WordPress plugin
WP Umbrella · WP Umbrella WordPress plugin
Medium · 5.4Patched
The published record identifies a cross-site request forgery vulnerability affecting WP Umbrella versions 2.24.2 through 2.26.2. The vendor explains that exploitation required a logged-in WordPress administrator to visit a malicious page.
Unauthenticated protection bypass in Hide My WP Ghost
WP Ghost · Hide My WP Ghost WordPress plugin
Medium · 5.3Patched
On sites with WooCommerce active, Hide My WP Ghost 7.0.10 can treat an attacker-supplied request parameter as proof of a WooCommerce request and skip its firewall, threat detection, and URL-hiding checks. An unauthenticated request can then expose login and admin URLs the plugin was configured to conceal.