The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Pardakht Delkhah Plugin | — | Update pardakht-delkhah plugin to version 2.9.3, or a newer patched version | May 15, 2025 | Dec 27, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub