wordpress-rce-theme-editor-webshell-injection

WordPress RCE - Inyeccion de Webshell via Editor de Temas...

WordPress Relevanssi Premium plugin <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Philipp Doblhofer in WordPress Plugin Relevanssi Premium versions = 2.31.4...

WordPress All in One Files Upload plugin 2.0.3-2.0.16 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Mike Gozdiskowski in WordPress Plugin All in One Files Upload versions 2.0.3-2.0.16...

WordPress Robin Image Optimizer plugin 2.0.0-2.0.7 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Jakub Herman in WordPress Plugin Robin image optimizer versions 2.0.0-2.0.7...

WordPress WP Mobile Menu plugin 2.7.4-2.8 - Stored XSS vulnerability

Stored XSS vulnerability discovered by Het Kalariya in WordPress Plugin WP Mobile Menu versions 2.7.4-2.8...

WordPress Broken Link Notifier plugin 1.3.1-2.0.0.0 - Unauthenticated SSRF vulnerability

Unauthenticated SSRF vulnerability discovered by Amin Guliyev in WordPress Plugin Broken Link Notifier versions 1.3.1-2.0.0.0...

WordPress Relevanssi – A Better Search plugin <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Yuto Hyakumoto in WordPress Plugin Relevanssi versions = 4.28.3...

WordPress Download Monitor plugin <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by whale120 in WordPress Plugin Download Monitor versions = 5.2.10...

WordPress Newsletter – Send awesome emails from WordPress plugin <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by crow in WordPress Plugin Newsletter versions = 9.4.0...

WordPress Kubio AI Page Builder plugin <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by daroo in WordPress Plugin Kubio AI Page Builder versions = 2.9.2...

WordPress Download Manager plugin <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by daroo in WordPress Plugin Download Manager versions = 3.3.70...

WordPress Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by thevietronin in WordPress Plugin Ultimate Member versions = 2.13.1...

WordPress SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin <= 3.5.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin SupportCandy versions = 3.5.3...

WordPress EWWW Image Optimizer plugin <= 8.7.7 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by braintx in WordPress Plugin EWWW Image Optimizer versions = 8.7.7...

WordPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting vulnerability

Reflected DOM-Based Cross-Site Scripting vulnerability discovered by Yuto Hyakumoto in WordPress Plugin LearnPress versions = 4.4.7...

WordPress Ivory Search – WordPress Search Plugin plugin <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting vulnerability

Reflected DOM-Based Cross-Site Scripting vulnerability discovered by @nacento in WordPress Plugin Ivory Search versions = 5.5.18...

WordPress Magic Tooltips For Contact Form 7 plugin <= 1.0.34 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Afifudin Maarif in WordPress Plugin Magic Tooltips For Contact Form 7 versions = 1.0.34...

WordPress GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin <= 2.8.186 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Samuele Santonicola in WordPress Plugin GeoDirectory versions = 2.8.186...

WordPress GD Rating System plugin <= 3.7.1 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by R4mbb in WordPress Plugin GD Rating System versions = 3.7.1...

WordPress Transliterator – Multilingual and Multi-script Text Conversion plugin <= 2.5.8 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Transliterator versions = 2.5.8...