318915 matches found
PT-2026-104608
Name of the Vulnerable Software and Affected Versions Horizontal scrolling announcements versions prior to 2.7 Description The plugin fails to sanitize and escape an announcement setting before it is output into an attribute context on the front end. This allows users with access to the...
PT-2026-104606
Name of the Vulnerable Software and Affected Versions Simple Shopping Cart WordPress plugin versions prior to 5.2.6 Description Stored Cross-Site Scripting XSS occurs because the plugin fails to escape certain settings field values before they are displayed on the admin settings page. This allows...
WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetBlog versions = 2.4.10...
Exploit for Interpretation Conflict in Wordpress
wp2shell-PoC ⚠ This tool is created solely for education...
WordPress UsersWP plugin <= 1.2.73 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Mor Golan in WordPress Plugin UsersWP versions = 1.2.73...
WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.58 - Cross Site Scripting (XSS) vulnerability
WordPress BlockStrap Page Builder - Bootstrap Blocks plugin = 0.1.58 - Cross Site Scripting XSS vulnerability discovered by Nguyen Viet Tin in WordPress Plugin BlockStrap Page Builder - Bootstrap Blocks versions = 0.1.58...
WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Khanh Nguyen in WordPress Plugin WP BASE Booking versions = 6.4.0...
WordPress WP Spell Check plugin <= 12.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Spell Check versions = 12.1...
WordPress Simple Event Planner plugin <= 1.5.7 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Simple Event Planner versions = 1.5.7...
WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Sunshine Photo Cart versions = 3.7.1...
WordPress Betheme theme <= 28.5.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Theme Betheme versions = 28.5.8...
WordPress UpSolution Core plugin <= 8.44 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Plugin UpSolution Core versions = 8.44...
WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Welcart e-Commerce versions = 2.12.3...
WordPress Featured Image from URL plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by ChuongVN in WordPress Plugin Featured Image from URL versions = 6.0.7...
WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin Ajax Search Pro versions = 4.29.1...
WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin tagDiv Opt-In Builder versions = 1.7.6...
WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin tagDiv Opt-In Builder versions = 1.7.6...
WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability
WordPress JNews - Pay Writer plugin = 12.0.1 - SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin JNews - Pay Writer versions = 12.0.1...
WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Media LIbrary Assistant versions = 3.41...