9414 matches found
PT-2026-49485
Name of the Vulnerable Software and Affected Versions WP Job Portal versions prior to 2.5.3 Description Cross Site Scripting XSS exists in the plugin, allowing users with the Subscriber role to execute malicious scripts in the browser of other users. Recommendations Update to a version newer than...
PT-2026-49447
Subscriber Cross Site Scripting XSS in Contest Gallery = 28.1.6 versions...
PT-2026-49460
Subscriber Cross Site Scripting XSS in EventPrime = 4.3.2.1 versions...
PT-2026-49411
Subscriber SQL Injection in MasterStudy LMS = 3.7.25 versions...
PT-2026-49430
Subscriber Broken Access Control in Groundhogg 4.4.1 versions...
PT-2026-49432
Subscriber Broken Access Control in Amelia = 2.2 versions...
PT-2026-49431
Subscriber Broken Access Control in myCred = 3.0.3 versions...
PT-2026-49494
Subscriber Sensitive Data Exposure in XCloner = 4.8.6 versions...
PT-2026-49478
Subscriber Cross Site Scripting XSS in King Addons for Elementor = 51.1.62 versions...
PT-2026-49344
Name of the Vulnerable Software and Affected Versions FV Flowplayer Video Player versions prior to 7.5.51.7212 Description Cross Site Scripting XSS is possible for users with the Subscriber role. This issue allows an attacker to inject malicious scripts into web pages viewed by other users...
PT-2026-49393
Subscriber Broken Access Control in Motors 1.4.107 versions...
PT-2026-49424
Subscriber Broken Authentication in AutomatorWP = 5.6.7 versions...
PT-2026-49428
Subscriber Sensitive Data Exposure in WP SMS = 7.2.1 versions...
PT-2026-49402
Subscriber Broken Access Control in RepairBuddy = 4.1132 versions...
PT-2026-49493
Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System = 3.3.6 versions...
PT-2026-49505
Subscriber Sensitive Data Exposure in Coupon Affiliates = 7.8.1 versions...
PT-2026-49397
Subscriber Arbitrary File Upload in WpStream 4.11.2 versions...
PT-2026-49426
Subscriber Broken Access Control in ChatBot = 7.9.7 versions...
PT-2026-49227
Name of the Vulnerable Software and Affected Versions Really Simple SSL versions prior to 9.6.0 Description Broken Access Control allows users with the Subscriber role to perform unauthorized actions. Recommendations Update to a version newer than 9.5.9...