PT-2022-19592

Name of the Vulnerable Software and Affected Versions 3xSocializer plugin versions 0.98.22 and earlier Description The issue is related to a SQL Injection SQLi vulnerability. This vulnerability can be exploited by users with a low role, such as a subscriber or higher, in WordPress. Recommendation...

PT-2022-11308

Name of the Vulnerable Software and Affected Versions WHMCS Bridge WordPress plugin versions up to and including 6.1 Description The issue allows attackers to inject arbitrary web scripts via the cc whmcs bridge url parameter in the /whmcs-bridge/bridge cp.php file. This is due to missing...

PT-2021-15752

Name of the Vulnerable Software and Affected Versions: WP Page Builder versions prior to 1.2.4 Description: The issue allows subscriber-level users to edit and make changes to any and all posts and pages by default, unless user roles are specifically blocked from editing posts and pages...