simonfairbairn The Bucketlister

• CVE-2025-15476 Medium 4.3 The Bucketlister <= 0.1.5 - Missing Authorization to Authenticated (Subscriber+) Bucket List Modification 0.2%
• CVE-2025-15477 Medium 6.5 The Bucketlister <= 0.1.5 - Authenticated (Contributor+) SQL Injection via `category` and `id` Shortcode Attributes 0.3%