WordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Cozy Blocks versions = 2.2.23...

WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin AI Chatbot for WordPress – Hyve Lite versions = 2.0.2...

WordPress Five Star Restaurant Reservations plugin <= 2.7.24 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Five Star Restaurant Reservations versions = 2.7.24...

WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dcs in WordPress Plugin Timetics versions = 1.0.63...

WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Oly Hossen in WordPress Plugin Photo Reviews for WooCommerce versions = 1.2.30...

WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Pedro Delgado in WordPress Plugin WP User Manager versions = 2.9.20...

WordPress RepairBuddy plugin <= 4.1225 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin RepairBuddy versions = 4.1225...

WordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by cazy in WordPress Plugin Lookzy versions = 1.1.14...

wordpress-stored-xss-privilege-escalation-admin-creation

WordPress Stored XSS - Escalacion de Privilegios y Creacion de...

wordpress-rce-theme-editor-webshell-injection

WordPress RCE - Inyeccion de Webshell via Editor de Temas...

WordPress Relevanssi Premium plugin <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Philipp Doblhofer in WordPress Plugin Relevanssi Premium versions = 2.31.4...

WordPress All in One Files Upload plugin 2.0.3-2.0.16 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Mike Gozdiskowski in WordPress Plugin All in One Files Upload versions 2.0.3-2.0.16...

WordPress Robin Image Optimizer plugin 2.0.0-2.0.7 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Jakub Herman in WordPress Plugin Robin image optimizer versions 2.0.0-2.0.7...

WordPress WP Mobile Menu plugin 2.7.4-2.8 - Stored XSS vulnerability

Stored XSS vulnerability discovered by Het Kalariya in WordPress Plugin WP Mobile Menu versions 2.7.4-2.8...

WordPress Broken Link Notifier plugin 1.3.1-2.0.0.0 - Unauthenticated SSRF vulnerability

Unauthenticated SSRF vulnerability discovered by Amin Guliyev in WordPress Plugin Broken Link Notifier versions 1.3.1-2.0.0.0...

WordPress Relevanssi – A Better Search plugin <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Yuto Hyakumoto in WordPress Plugin Relevanssi versions = 4.28.3...

WordPress Download Monitor plugin <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by whale120 in WordPress Plugin Download Monitor versions = 5.2.10...

WordPress Newsletter – Send awesome emails from WordPress plugin <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by crow in WordPress Plugin Newsletter versions = 9.4.0...

WordPress Kubio AI Page Builder plugin <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by daroo in WordPress Plugin Kubio AI Page Builder versions = 2.9.2...

WordPress Download Manager plugin <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by daroo in WordPress Plugin Download Manager versions = 3.3.70...