• Discovery date: 17/12/2025
• Discovered by: jason carle
• Reported to: Wordfence

• Plugin Name: Spin Wheel
• Affected Version: v2.0.2 (and earlier)
• Plugin URI: https://wordpress.org/plugins/spin-wheel/

• Discovery date: 8/12/2025
• Discovered by: jason carle
• Reported to: Wordfence

• Plugin Name: Userback
• Affected Version: 1.0.15 (and earlier)
• Plugin URI: https://wordpress.org/plugins/userback/

Plugin Name: URL Media Uploader
Plugin Slug: url-media-uploader
WP.org Repo URL: https://wordpress.org/plugins/url-media-uploader/
Affected Versions: 1.0.0 - 1.0.1 (Latest)
Vulnerability Type: Missing Authorization / Privilege Escalation
Discovery Date: November 26, 2025

• Discovery date: 3/11/2025
• Discovered by: jsonc
• Reported to: None - went to disclose to find it's already reported :D

• Plugin Name: Link View
• Affected Version: 0.8.0 (and earlier)
• Plugin URI: https://wordpress.org/plugins/link-view/

Wordpress Theme Repository URL: https://wordpress.org/themes/context-blog/

Plugin Homepage: https://www.postmagthemes.com/downloads/context-blog-free-wordpress-theme/

Plugin Author: postmagthemes https://wordpress.org/themes/author/postmagthemes/

Wordpress Repository URL: https://en-au.wordpress.org/plugins/topbar/

Plugin Author: FME Addons https://www.fmeaddons.com/

Discovered by: Jason Carle hello@jasoncarle.com