WordPress Youzify plugin <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Review Deletion vulnerability discovered by Brian Mungai in WordPress Plugin Youzify versions = 1.3.2...

WordPress Newsletter2Go plugin <= 4.0.14 - Missing Authorization to Authenticated (Subscriber+) Style Reset vulnerability

Missing Authorization to Authenticated Subscriber+ Style Reset vulnerability discovered by Lucio Sá in WordPress Plugin Newsletter2Go versions = 4.0.14...

WordPress Infility Global plugin <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Plugin Options Update vulnerability

Authenticated Subscriber+ Missing Authorization to Plugin Options Update vulnerability discovered by Francesco Carlucci in WordPress Plugin Infility Global versions = 2.9.8...

WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Whitelist Script vulnerability

Missing Authorization to Authenticated Subscriber+ Whitelist Script vulnerability discovered by Tieu Pham Trong Nhan in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 3.6.5...

WordPress AI Quiz plugin <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Options Update vulnerability discovered by vgo0 in WordPress Plugin AI Quiz versions = 1.1...

WordPress Music Player for Elementor plugin <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Template Import vulnerability

Missing Authorization to Authenticated Subscriber+ Template Import vulnerability discovered by WordFence in WordPress Plugin Music Player for Elementor – Audio Player & Podcast Player versions = 2.4.1...

WordPress Kognetiks Chatbot for WordPress plugin <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Addition vulnerability

Missing Authorization to Authenticated Subscriber+ Assistant Addition vulnerability discovered by Tieu Pham Trong Nhan in WordPress Plugin Kognetiks Chatbot for WordPress versions = 2.1.7...

WordPress Kognetiks Chatbot for WordPress plugin <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Assistant Deletion vulnerability discovered by Tieu Pham Trong Nhan in WordPress Plugin Kognetiks Chatbot for WordPress versions = 2.1.7...

WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation vulnerability

Missing Authorization to Authenticated Subscriber+ Message Activation/Deactivation vulnerability discovered by Francesco Carlucci in WordPress Plugin WPC Smart Messages for WooCommerce versions = 4.2.1...

WordPress WPS Telegram Chat plugin <= 4.5.4 - Authenticated (Subscriber+) Unauthorized Access to Telegram Bot API vulnerability

Authenticated Subscriber+ Unauthorized Access to Telegram Bot API vulnerability discovered by István Márton in WordPress Plugin WPS Telegram Chat versions = 4.5.4...

WordPress Email Subscribers & Newsletters plugin <= 5.7.34 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Information Exposure vulnerability discovered by Michelle Porter in WordPress Plugin Email Subscribers & Newsletters versions = 5.7.34...

WordPress Advanced File Manager plugin <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by TANG Cheuk Hei siunam in WordPress Plugin Advanced File Manager versions = 5.2.8...

WordPress Post Grid and Gutenberg Blocks plugin <= 2.2.90 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by wesley wcraft in WordPress Plugin Post Grid and Gutenberg Blocks versions = 2.2.90...

WordPress ForumWP plugin <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via Account Takeover vulnerability

Insecure Direct Object Reference to Authenticated Subscriber+ Privilege Escalation via Account Takeover vulnerability discovered by wesley wcraft in WordPress Plugin ForumWP versions = 2.0.2...

WordPress Revision Manager TMC plugin <= 2.8.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Email Sending vulnerability discovered by Lucio Sá in WordPress Plugin Revision Manager TMC versions = 2.8.19...

WordPress Event Espresso 4 Decaf plugin < 5.0.22.decaf - Authenticated (Subscriber+) Missing Authorization to Limited Plugin Settings Modification vulnerability

Authenticated Subscriber+ Missing Authorization to Limited Plugin Settings Modification vulnerability discovered by Lucio Sá in WordPress Plugin Event Espresso 4 Decaf versions 5.0.22.decaf...

WordPress Orchid Store theme <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Plugin Activation vulnerability discovered by Lucio Sá in WordPress Theme Orchid Store versions = 1.5.6...

WordPress TemplateSpare plugin <= 2.4.2 - Missing Authorization to Authenticated (Subscriber+) Theme Update vulnerability

Missing Authorization to Authenticated Subscriber+ Theme Update vulnerability discovered by Lucio Sá in WordPress Plugin TemplateSpare versions = 2.4.2...

WordPress Media Hygiene plugin <= 3.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Attachment Deletion vulnerability discovered by Lucio Sá in WordPress Plugin Media Hygiene versions = 3.0.1...

WordPress Bulk Posts Editing For WordPress plugin <= 4.2.3 - Authenticated (Subscriber+) Missing Authorization vulnerability

Authenticated Subscriber+ Missing Authorization vulnerability discovered by Benedictus Jovan aillesiM in WordPress Plugin Bulk Posts Editing For WordPress versions = 4.2.3...