24270 matches found
WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by VanTastic in WordPress Plugin Dokan Pro versions = 5.0.3...
WordPress Dokan Pro plugin <= 5.0.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Expatch in WordPress Plugin Dokan Pro versions = 5.0.2...
WordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Expatch in WordPress Plugin Dokan Pro versions = 5.0.2...
WordPress Dokan Pro plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Dokan Pro versions = 5.0.0...
PT-2026-63915
Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...
PT-2026-63916
Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions...
PT-2026-63870
Subscriber Broken Access Control in ShopLentor Pro = 2.8.5 versions...
PT-2026-63831
Unauthenticated Cross Site Scripting XSS in Real Estate Manager Pro = 12.8.5 versions...
PT-2026-63869
Unauthenticated Broken Access Control in ShopLentor Pro = 2.8.5 versions...
PT-2026-63837
Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...
PT-2026-63822
Customer Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions...
PT-2026-63823
Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...
CVE-2026-57767: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...
CVE-2026-57370: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.9.1 versions...
CVE-2026-65495: Missing Authorization
Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions...
CVE-2026-65493: Deserialization of Untrusted Data
Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...
CVE-2026-65492: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Dokan Pro allows Reflected XSS. This issue affects Dokan Pro: from n/a before 5.0.7...
CVE-2026-65712: Improper Limitation of a Pathname to a Restricted Directory
Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...
CVE-2026-64874: Exposure of Sensitive Information to an Unauthorized Actor
Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...