<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Md Minaruzzaman Shovon — Security Advisories &amp; CVE Disclosures</title>
    <link>https://shovon.bd/security</link>
    <description>Security research, WordPress plugin vulnerability disclosures, and CVE advisories by Md Minaruzzaman Shovon.</description>
    <language>en-us</language>
    <lastBuildDate>Wed, 22 Jul 2026 17:25:04 GMT</lastBuildDate>
    <atom:link href="https://shovon.bd/rss.xml" rel="self" type="application/rss+xml"/>
    
    <item>
      <title>CVE-2026-14322 — Timetics Unauthenticated Booking Auto-Approval</title>
      <link>https://shovon.bd/security/cve-2026-14322</link>
      <guid isPermaLink="true">https://shovon.bd/security/cve-2026-14322</guid>
      <pubDate>Wed, 01 Jul 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Unauthenticated Booking Auto-Approval via Arbitrary payment_method in WordPress Timetics < 1.0.57. Discovered and reported by Md Minaruzzaman Shovon.]]></description>
    </item>
    <item>
      <title>CVE-2026-10749 — Post Duplicator PHP Object Injection</title>
      <link>https://shovon.bd/security/cve-2026-10749</link>
      <guid isPermaLink="true">https://shovon.bd/security/cve-2026-10749</guid>
      <pubDate>Mon, 01 Jun 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[PHP Object Injection vulnerability in WordPress Post Duplicator <= 3.0.14 via unsanitized unserialize(). Discovered and reported by Md Minaruzzaman Shovon.]]></description>
    </item>
    <item>
      <title>CVE-2026-57661 — WPComplete Broken Access Control</title>
      <link>https://shovon.bd/security/cve-2026-57661</link>
      <guid isPermaLink="true">https://shovon.bd/security/cve-2026-57661</guid>
      <pubDate>Fri, 26 Jun 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Broken Access Control vulnerability in WordPress WPComplete <= 2.9.5.5 allowing Subscriber privilege escalation. Discovered and reported by Md Minaruzzaman Shovon.]]></description>
    </item>
  </channel>
</rss>