WordPress MemberPress Discord Addon Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin MemberPress Discord Addon versions = 1.1.1...

CVE-2021-4290

creationtimestamp| type| source ---|---|--- 2025-04-14 16:53:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11644...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the soupmultipartnewfrommessage function. An attacker can induce the server to read out of bounds by sending a specially crafted HTTP request. Remediation A fix was pushed into the master branch but not yet...

WordPress TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin <= 2.4.6 - Authenticated (Administrator+) SQL Injection via 's' Parameter vulnerability

Authenticated Administrator+ SQL Injection via 's' Parameter vulnerability discovered by broccoli in WordPress Plugin TS Poll versions = 2.4.6...

WordPress PowerPress Podcasting plugin < 11.9.18 - Author+ XSS via Podcast URL vulnerability

Author+ XSS via Podcast URL vulnerability discovered by Bob Matyas in WordPress Plugin PowerPress Podcasting versions 11.9.18...

CVE-2022-46582

creationtimestamp| type| source ---|---|--- 2025-04-11 22:51:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11498...

WordPress Cart66 Cloud plugin <= 2.3.7 - Unauthenticated Information Exposure vulnerability

Unauthenticated Information Exposure vulnerability discovered by Avraham Shemesh in WordPress Plugin Cart66 Cloud versions = 2.3.7...

CVE-2022-46596

creationtimestamp| type| source ---|---|--- 2025-04-11 16:51:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11460...

WordPress Kargo Entegratör plugin <= 1.1.14 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Kargo Entegratör versions = 1.1.14...

WordPress WooCommerce Loyal Customers plugin <= 2.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin WooCommerce Loyal Customers versions = 2.6...

CVE-2025-29369

creationtimestamp| type| source ---|---|--- 2025-04-10 20:49:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11340...

CVE-2022-46178

creationtimestamp| type| source ---|---|--- 2025-04-10 19:49:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11318...

GHSA-832J-56XW-5P7F

creationtimestamp| type| source ---|---|--- 2025-04-10 14:50:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11240...

WordPress License Manager for WooCommerce plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin License Manager for WooCommerce versions = 3.0.9...

WordPress Web2application Plugin <= 6.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Web2application versions = 6.1...

WordPress SERPed.net Plugin <= 4.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin SERPed.net versions = 4.6...

WordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Dimas Maulana in WordPress Plugin Zephyr Project Manager versions = 3.3.101...

Expected Behavior Violation

Overview Affected versions of this package are vulnerable to Expected Behavior Violation due to the behavior of the DisableForwarding directive in sshd8, which fails to disable X11 forwarding and agent forwarding by default. An attacker can bypass intended security restrictions. Remediation A fix...

WordPress Industrial Lite Theme <= 1.0.8 is vulnerable to Broken Access Control

Software Industrial Lite Type Theme Vulnerable versions = 1.0.8 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-26955 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1a08c3e67c74 Credits Mika Required privilege Subscrib...

WordPress Accredible Certificates & Open Badges plugin <= 1.4.9 - Authenticated (Administrator+) SQL Injection via orderby Parameter vulnerability

Authenticated Administrator+ SQL Injection via orderby Parameter vulnerability discovered by oncybersec in WordPress Plugin Accredible Certificates & Open Badges versions = 1.4.9...