154 matches found
WordPress ShortPixel Image Optimizer plugin <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title vulnerability
Authenticated Author+ Stored Cross-Site Scripting via Attachment Title vulnerability discovered by daroo in WordPress Plugin ShortPixel Image Optimizer versions = 6.4.3...
WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability
SQL Injection vulnerability discovered by daroo in WordPress Plugin Simply Schedule Appointments versions = 1.6.9.27...
WordPress Download Monitor plugin <= 5.1.8 - SQL Injection vulnerability
SQL Injection vulnerability discovered by daroo in WordPress Plugin Download Monitor versions = 5.1.8...
WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin Helpdesk Support Ticket System for WooCommerce versions = 2.1.2...
WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by daroo in WordPress Plugin Element Pack Elementor Addons versions = 8.4.2...
WordPress RewardsWP plugin <= 1.0.4 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by daroo in WordPress Plugin RewardsWP versions = 1.0.4...
WordPress Creator LMS plugin <= 1.1.18 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by daroo in WordPress Plugin Creator LMS versions = 1.1.18...
WordPress Dokan plugin <= 4.2.4 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by daroo in WordPress Plugin Dokan versions = 4.2.4...
WordPress Xagio SEO plugin <= 7.1.0.30 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by daroo in WordPress Plugin Xagio SEO versions = 7.1.0.30...
WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin WPCafe versions = 3.0.7...
WordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin WP User Frontend versions = 4.2.5...
WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by daroo in WordPress Plugin Bus Ticket Booking with Seat Reservation versions = 5.6.0...
WordPress Chaty plugin <= 3.5.1 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by daroo in WordPress Plugin Chaty versions = 3.5.1...
WordPress Tablesome plugin <= 1.2.3 - SQL Injection vulnerability
SQL Injection vulnerability discovered by daroo in WordPress Plugin Tablesome versions = 1.2.3...
WordPress Classified Listing plugin <= 5.3.4 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by daroo in WordPress Plugin Classified Listing versions = 5.3.4...
WordPress My Tickets plugin <= 2.1.0 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by daroo in WordPress Plugin My Tickets versions = 2.1.0...
WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by daroo in WordPress Plugin Paid Member Subscriptions versions = 2.16.8...
WordPress Easy Hotel Booking plugin <= 1.8.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin Easy Hotel Booking versions = 1.8.8...