WordPress If-So Dynamic Content Personalization plugin < 1.8.0.3 - Contributor+ Shortcode Stored XSS vulnerability

Contributor+ Shortcode Stored XSS vulnerability discovered by Felipe Caon in WordPress Plugin If-So Dynamic Content Personalization versions 1.8.0.3...

WordPress CM Table Of Contents – WordPress TOC Plugin plugin < 1.2.3 - Settings Reset via CSRF vulnerability

Settings Reset via CSRF vulnerability discovered by Felipe Caon in WordPress Plugin CM Table Of Contents – WordPress TOC Plugin versions 1.2.3...

WordPress WP Hardening plugin <= 1.2.6 - Unauthenticated Security Feature Bypass to Username Enumeration vulnerability

Unauthenticated Security Feature Bypass to Username Enumeration vulnerability discovered by Felipe Caon in WordPress Plugin WP Hardening versions = 1.2.6...

WordPress WP Hardening Plugin <= 1.2.6 is vulnerable to Bypass Vulnerability

Software WP Hardening Type Plugin Vulnerable versions = 1.2.6 Fixed in 1.2.7 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-6641 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5e3f8dc1dce6 Credits Felipe Caon Required privilege...

WordPress Search Filter Pro plugin < 2.5.18 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Felipe Caon in WordPress Plugin Search Filter Pro versions 2.5.18...

WordPress WP QuickLaTeX plugin < 3.8.7 - Admin+ Stored XSS in Background Color field vulnerability

Admin+ Stored XSS in Background Color field vulnerability discovered by Felipe Caon in WordPress Plugin WP QuickLaTeX versions 3.8.7...

WordPress CM WordPress Search And Replace Plugin plugin < 1.3.9 - Plugin Reset via CSRF vulnerability

Plugin Reset via CSRF vulnerability discovered by Felipe Caon in WordPress Plugin CM On Demand Search And Replace versions 1.3.9...

WordPress Simple Photoswipe plugin <= 0.1 - Subscriber+ Arbitrary Settings Update vulnerability

Subscriber+ Arbitrary Settings Update vulnerability discovered by Felipe Caon in WordPress Plugin Simple Photoswipe versions = 0.1...

WordPress Responsive video embed plugin < 0.5.1 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Felipe Caon in WordPress Plugin Responsive video embed versions 0.5.1...