WordPress Pixel Manager for WooCommerce Plugin <= 1.43.3 is vulnerable to Backdoor

Software Pixel Manager for WooCommerce Type Plugin Vulnerable versions = 1.43.3 Fixed in 1.43.4 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer SweetCode PSID 3a6235394517 Credits Sansec.io Required privilege Unauthenticated Published ...

WordPress ShipAny Plugin <= 1.1.52 is vulnerable to Backdoor

Software ShipAny Type Plugin Vulnerable versions = 1.1.52 Fixed in 1.1.53 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 3bc0ee8c1578 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Field Day Plugin <= 3.3.8 is vulnerable to Backdoor

Software Field Day Type Plugin Vulnerable versions = 3.3.8 Fixed in 3.4.0 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 00638b889259 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Tooltip for Gravity Forms Plugin <= 2.9 is vulnerable to Backdoor

Software Tooltip for Gravity Forms Type Plugin Vulnerable versions = 2.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 852a3f555d15 Credits Sansec.io Required privilege Unauthenticated Published 3...

WordPress alfred24 Click & Collect Plugin <= 1.1.7 is vulnerable to Backdoor

Software alfred24 Click & Collect Type Plugin Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID cf5f2b39e0cf Credits Sansec.io Required privilege Unauthenticated Published 3...

WordPress Digital River Global Commerce Plugin <= 2.0.2 is vulnerable to Backdoor

Software Digital River Global Commerce Type Plugin Vulnerable versions = 2.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 094cc90dcba0 Credits Sansec.io Required privilege Unauthenticated Publishe...

WordPress Sentry Plugin <= 7.8.0 is vulnerable to Backdoor

Software Sentry Type Plugin Vulnerable versions = 7.8.0 Fixed in 7.9.0 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7ce3176e4766 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress PowerPress Podcasting plugin by Blubrry plugin 11.9.3–11.9.4 - Injected Backdoor vulnerability

Injected Backdoor vulnerability discovered by WordFence in WordPress Plugin PowerPress Podcasting versions 11.9.3-11.9.4...

WordPress Ad Invalid Click Protector (AICP) plugin 1.2.9 - Injected Backdoor vulnerability

Injected Backdoor vulnerability discovered by WordFence in WordPress Plugin Ad Invalid Click Protector AICP versions 1.2.9...

WordPress WP Server Health Stats plugin 1.7.6 - Injected Backdoor vulnerability

Injected Backdoor vulnerability discovered by WordFence in WordPress Plugin WP Server Health Stats versions 1.7.6...

WordPress Seo Optimized Images plugin 2.1.2 - Injected Backdoor vulnerability

Injected Backdoor vulnerability discovered by WordFence in WordPress Plugin Seo Optimized Images versions 2.1.2...

WordPress WP Server Health Stats Plugin 1.7.6 is vulnerable to Backdoor

Software WP Server Health Stats Type Plugin Vulnerable versions 1.7.6 Fixed in 1.7.7 OWASP Top 10 A3: Injection Classification Backdoor CVE CVE-2024-6297 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 45a546f4e251 Credits WordFence Required privilege Unauthenticated...

WordPress Seo Optimized Images Plugin 2.1.2 is vulnerable to Backdoor

Software Seo Optimized Images Type Plugin Vulnerable versions 2.1.2 Fixed in 2.1.4 OWASP Top 10 A3: Injection Classification Backdoor CVE CVE-2024-6297 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 88a9e93519c2 Credits WordFence Required privilege Unauthenticated...

WordPress Ad Invalid Click Protector (AICP) Plugin 1.2.9 is vulnerable to Backdoor

Software Ad Invalid Click Protector AICP Type Plugin Vulnerable versions 1.2.9 Fixed in 1.2.10 OWASP Top 10 A3: Injection Classification Backdoor CVE CVE-2024-6297 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 443fcb84403b Credits WordFence Required privilege...

WordPress PowerPress Podcasting Plugin 11.9.3-11.9.4 is vulnerable to Backdoor

Software PowerPress Podcasting Type Plugin Vulnerable versions 11.9.3-11.9.4 Fixed in 11.9.5 OWASP Top 10 A3: Injection Classification Backdoor CVE CVE-2024-6297 Patch priority High CVSS severity High 10 Developer Claim ownership PSID cc7a51200190 Credits WordFence Required privilege...

WordPress Wrapper Link Elementor plugin 1.0.2, 1.0.3 - Injected Backdoor vulnerability

Injected Backdoor vulnerability discovered by WordFence in WordPress Plugin Wrapper Link Elementor versions 1.0.2,1.0.3...

WordPress Social Warfare plugin 4.4.6.4 to 4.4.7.1 - Injected Backdoor vulnerability

Injected Backdoor vulnerability discovered by WordFence in WordPress Plugin Social Warfare versions 4.4.6.4-4.4.7.1...

WordPress Simply Show Hooks plugin 1.2.2 - Injected Backdoor vulnerability

Injected Backdoor vulnerability discovered by WordFence in WordPress Plugin Simply Show Hooks versions 1.2.2...

WordPress Contact Form 7 Multi-Step Addon plugin 1.0.4 to 1.0.5 - Injected Backdoor vulnerability

Injected Backdoor vulnerability discovered by WordFence in WordPress Plugin Contact Form 7 Multi-Step Addon versions 1.0.4-1.0.5...

WordPress BLAZE Retail Widget plugin 2.2.5 to 2.5.2 - Injected Backdoor vulnerability

Injected Backdoor vulnerability discovered by WordFence in WordPress Plugin BLAZE Retail Widget versions 2.2.5-2.5.2...