<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Md Minaruzzaman Shovon — Security Advisories &amp; CVE Disclosures</title>
    <link>https://shovon.bd/security</link>
    <description>Security research, WordPress plugin vulnerability disclosures, and CVE advisories by Md Minaruzzaman Shovon.</description>
    <language>en-us</language>
    <lastBuildDate>Fri, 07 Aug 2026 19:34:35 GMT</lastBuildDate>
    <atom:link href="https://shovon.bd/rss.xml" rel="self" type="application/rss+xml"/>
    
    <item>
      <title>CVE-2026-15048 — GeekyBot Unauthenticated Sensitive Information Exposure</title>
      <link>https://shovon.bd/security/cve-2026-15048</link>
      <guid isPermaLink="true">https://shovon.bd/security/cve-2026-15048</guid>
      <pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Sensitive Information Exposure vulnerability in WordPress GeekyBot < 1.2.8 allowing unauthenticated retrieval of chat history metadata, user IDs, and usernames. Discovered and reported by Md Minaruzzaman Shovon.]]></description>
    </item>
    <item>
      <title>CVE-2026-14322 — Timetics Unauthenticated Booking Auto-Approval</title>
      <link>https://shovon.bd/security/cve-2026-14322</link>
      <guid isPermaLink="true">https://shovon.bd/security/cve-2026-14322</guid>
      <pubDate>Wed, 01 Jul 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Unauthenticated Booking Auto-Approval via Arbitrary payment_method in WordPress Timetics < 1.0.57. Discovered and reported by Md Minaruzzaman Shovon.]]></description>
    </item>
    <item>
      <title>CVE-2026-10749 — Post Duplicator PHP Object Injection</title>
      <link>https://shovon.bd/security/cve-2026-10749</link>
      <guid isPermaLink="true">https://shovon.bd/security/cve-2026-10749</guid>
      <pubDate>Mon, 01 Jun 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[PHP Object Injection vulnerability in WordPress Post Duplicator <= 3.0.14 via unsanitized unserialize(). Discovered and reported by Md Minaruzzaman Shovon.]]></description>
    </item>
    <item>
      <title>CVE-2026-57661 — WPComplete Broken Access Control</title>
      <link>https://shovon.bd/security/cve-2026-57661</link>
      <guid isPermaLink="true">https://shovon.bd/security/cve-2026-57661</guid>
      <pubDate>Fri, 26 Jun 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Broken Access Control vulnerability in WordPress WPComplete <= 2.9.5.5 allowing Subscriber privilege escalation. Discovered and reported by Md Minaruzzaman Shovon.]]></description>
    </item>
    <item>
      <title>CVE-2026-14821 — Quiz and Survey Master Missing Authorization</title>
      <link>https://shovon.bd/security/cve-2026-14821</link>
      <guid isPermaLink="true">https://shovon.bd/security/cve-2026-14821</guid>
      <pubDate>Fri, 15 May 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Missing Authorization vulnerability in WordPress Quiz and Survey Master < 11.1.5 allowing arbitrary output template deletion. Discovered and reported by Md Minaruzzaman Shovon.]]></description>
    </item>
  </channel>
</rss>