WordPress HTTP Requests Manager plugin <= 1.3.11 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dodoh4t in WordPress Plugin HTTP Requests Manager versions = 1.3.11...

CVE-2024-50498

CVE-2024-50498 Description Improper Control of Generation of Code 'Code Injection' vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0. Setup Netcat Listener: Open a terminal on your machine and start a Netcat listener to wait fo...

WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ParkHyunWoo in WordPress Plugin Database for CF7 versions = 1.2.6...

WordPress Content Visibility for Divi Builder plugin <= 5.03 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by ParkHyunWoo in WordPress Plugin Content Visibility for Divi Builder versions = 5.03...

wp2shell

CVE-2026-63030 + CVE-2026-60137 – „wp2shell“: Unauthenticatede RCE im WordPress-Core Batch-Routen-Verwirrung der REST-API CVE-2026-63030 verknüpft mit einer WPQuery-authornotin-SQL-Injection CVE-2026-60137 → Pre-Auth Remote Code Execution gegen eine Standard-WordPress-Installation. Entdeckt von...

WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Theme EduMall versions = 4.5.3...

WordPress Lumise Product Designer plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Lumise Product Designer versions = 2.1.1...

WordPress Instapage Plugin plugin <= 3.7.2 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by ParkHyunWoo in WordPress Plugin Instapage Plugin versions = 3.7.2...

WordPress Edwiser Bridge plugin <= 4.3.4 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Jakub Herman in WordPress Plugin Edwiser Bridge versions = 4.3.4...

WordPress Wise Chat plugin <= 3.4.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by takito in WordPress Plugin Wise Chat versions = 3.4.3...

WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dodoh4t in WordPress Plugin Contact Form to DB by BestWebSoft versions = 1.7.6...

WordPress Booknetic plugin <= 4.8.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Bonds in WordPress Plugin Booknetic versions = 4.8.5...

WordPress Woffice theme <= 5.4.35 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Bonds in WordPress Theme Woffice versions = 5.4.35...

WordPress App for Cloudflare® plugin <= 1.10.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by takito in WordPress Plugin App for Cloudflare® versions = 1.10.1...

WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jakub Herman in WordPress Plugin PayPlug for WooCommerce Official versions = 3.1.0...

WordPress Jobs for WordPress plugin <= 2.8.2 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by hhhai in WordPress Plugin Jobs for WordPress versions = 2.8.2...

WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Aurélien BOURDOIS Elymaro in WordPress Plugin WP Duplicate versions = 1.1.11...

WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jamaal ahmed in WordPress Plugin Taskbot versions = 6.6...

WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Jamaal ahmed in WordPress Plugin Taskbot versions = 6.6...

WordPress Midtrans-WooCommerce plugin <= 2.32.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ParkHyunWoo in WordPress Plugin Midtrans-WooCommerce versions = 2.32.3...