WordPress Consultpress Lite theme <= 1.2.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Consultpress Lite theme versions = 1.2.3. Solution No patched version available...

WordPress Page Studio Lite Plugin plugin <= 1.0.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Page Studio Lite Plugin plugin versions = 1.0.6. Solution No patched version available...

WordPress Woocommerce Blocker Lite plugin <= 2.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Woocommerce Blocker Lite plugin versions = 2.0.3. Solution Update the WordPress Woocommerce Blocker Lite plugin to the latest available version at least 2.1.0...

WordPress Social Gallery Lite plugin <= 3.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Social Gallery Lite plugin versions = 3.1. Solution No patched version available...

WordPress Pretty Opt In Lite – Content Locker for Lead Generation plugin < 1.2.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Pretty Opt In Lite – Content Locker for Lead Generation plugin versions 1.2.2. Solution Update the WordPress Pretty Opt In Lite – Content Locker for Lead Generation plugin to the latest available versi...

WordPress Pretty Opt In Lite – Content Locker for Lead Generation plugin < 1.2.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Pretty Opt In Lite – Content Locker for Lead Generation plugin versions 1.2.2. Solution Update the WordPress Pretty Opt In Lite – Content Locker for Lead Generation plugin to the latest available version at least 1.2.2...

AP Pricing Tables Lite < 1.1.5 - Reflected Cross-Site Scripting

The plugin does not sanitize and escape the postid parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting. PoC https://example.com/wp-admin/admin.php?page=ap-pricing-tables-lite-add-new=1'...

WordPress UltraAddons Elementor Lite plugin <= 1.1.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress UltraAddons Elementor Lite plugin versions = 1.1.0. Solution Update the WordPress UltraAddons Elementor Lite plugin to the latest available version at least 1.1.1...

WordPress Page Studio Lite Plugin plugin <= 1.0.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Page Studio Lite Plugin plugin versions = 1.0.6. Solution No patched version available...

WordPress Aquarella Lite theme <= 1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Aquarella Lite theme versions = 1.1. Solution No patched version available...

WordPress Broadcast Lite theme < 2.0.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Broadcast Lite theme versions 2.0.3. Solution Update the WordPress Broadcast Lite theme to the latest available version at least 2.0.3...

WordPress Aquarella Lite theme <= 1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Aquarella Lite theme versions = 1.1. Solution No patched version available...

WordPress Woocommerce Blocker Lite plugin <= 2.0.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Woocommerce Blocker Lite plugin versions = 2.0.3. Solution Update the WordPress Woocommerce Blocker Lite plugin to the latest available version at least 2.1.0...

WordPress Addendio LITE – Find WordPress plugins and themes plugin <= 1.2.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Addendio LITE – Find WordPress plugins and themes plugin versions = 1.2.2. Solution No patched version available...

WordPress Addendio LITE – Find WordPress plugins and themes plugin <= 1.2.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Addendio LITE – Find WordPress plugins and themes plugin versions = 1.2.2. Solution No patched version available...

WordPress WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payment & Quiz Forms plugin <= 1.6.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payment & Quiz Forms plugin versions = 1.6.2. Solution Update the WordPress WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payment & Quiz Forms plugin to...

WordPress AP Pricing Tables Lite plugin <= 1.1.4 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Ran Crane in WordPress AP Pricing Tables Lite plugin versions = 1.1.4. Solution Update the WordPress AP Pricing Tables Lite plugin to the latest available version at least 1.1.5...

WordPress Consultpress Lite theme <= 1.2.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Consultpress Lite theme versions = 1.2.3. Solution No patched version available...

WordPress WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payment & Quiz Forms plugin <= 1.6.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payment & Quiz Forms plugin versions = 1.6.2. Solution Update the WordPress WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payme...

WordPress Broadcast Lite theme < 2.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Broadcast Lite theme versions 2.0.3. Solution Update the WordPress Broadcast Lite theme to the latest available version at least 2.0.3...