WordPress Pay with Vipps for WooCommerce plugin <= 6.2.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Pay with Vipps for WooCommerce versions = 6.2.0...

WordPress Scratch & Win – Giveaways and Contests plugin <= 3.0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by SecondGateWP in WordPress Plugin Scratch & Win – Giveaways and Contests versions = 3.0.2...

WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Peter Tang in WordPress Plugin Advanced Post Manager versions = 4.5.5...

WordPress RepairBuddy plugin <= 4.1226 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin RepairBuddy versions = 4.1226...

WordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Cozy Blocks versions = 2.2.23...

WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin AI Chatbot for WordPress – Hyve Lite versions = 2.0.2...

WordPress Five Star Restaurant Reservations plugin <= 2.7.24 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Five Star Restaurant Reservations versions = 2.7.24...

WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dcs in WordPress Plugin Timetics versions = 1.0.63...

WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Oly Hossen in WordPress Plugin Photo Reviews for WooCommerce versions = 1.2.30...

WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Pedro Delgado in WordPress Plugin WP User Manager versions = 2.9.20...

WordPress RepairBuddy plugin <= 4.1225 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin RepairBuddy versions = 4.1225...

WordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by cazy in WordPress Plugin Lookzy versions = 1.1.14...

wordpress-stored-xss-privilege-escalation-admin-creation

WordPress Stored XSS - Escalacion de Privilegios y Creacion de...

wordpress-rce-theme-editor-webshell-injection

WordPress RCE - Inyeccion de Webshell via Editor de Temas...

WordPress Relevanssi Premium plugin <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Philipp Doblhofer in WordPress Plugin Relevanssi Premium versions = 2.31.4...

WordPress All in One Files Upload plugin 2.0.3-2.0.16 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Mike Gozdiskowski in WordPress Plugin All in One Files Upload versions 2.0.3-2.0.16...

WordPress Robin Image Optimizer plugin 2.0.0-2.0.7 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Jakub Herman in WordPress Plugin Robin image optimizer versions 2.0.0-2.0.7...

WordPress WP Mobile Menu plugin 2.7.4-2.8 - Stored XSS vulnerability

Stored XSS vulnerability discovered by Het Kalariya in WordPress Plugin WP Mobile Menu versions 2.7.4-2.8...

WordPress Broken Link Notifier plugin 1.3.1-2.0.0.0 - Unauthenticated SSRF vulnerability

Unauthenticated SSRF vulnerability discovered by Amin Guliyev in WordPress Plugin Broken Link Notifier versions 1.3.1-2.0.0.0...

WordPress Relevanssi – A Better Search plugin <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Yuto Hyakumoto in WordPress Plugin Relevanssi versions = 4.28.3...