Lucene search
+L

17 matches found

Patchstack
Patchstack
added 2026/09/01 7:59 a.m.11 views

WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by VanTastic in WordPress Plugin WP User Frontend versions = 4.3.10...

8.8CVSS5.9AI score0.00482EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/24 7:47 a.m.10 views

WordPress Super Forms plugin <= 6.3.315 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by VanTastic in WordPress Plugin Super Forms versions = 6.3.315...

7.5CVSS5.2AI score0.00373EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/20 1:16 p.m.12 views

WordPress Digits plugin <= 9.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by VanTastic in WordPress Plugin Digits versions = 9.2...

9.8CVSS5.3AI score0.00268EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/17 12:49 p.m.11 views

WordPress Modern Events Calendar plugin < 7.35.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by VanTastic in WordPress Plugin Modern Events Calendar versions 7.35.0...

9.3CVSS5.8AI score0.00383EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/10 12:19 p.m.11 views

WordPress Nokri theme <= 1.6.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by VanTastic in WordPress Theme Nokri versions = 1.6.6...

9.8CVSS5.2AI score0.00321EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/23 11:21 a.m.14 views

WordPress CoCart – Headless ecommerce plugin <= 4.8.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by VanTastic in WordPress Plugin CoCart – Headless ecommerce versions = 4.8.4...

7.5CVSS5.8AI score0.00238EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/23 6:02 a.m.15 views

WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by VanTastic in WordPress Plugin Dokan Pro versions = 5.0.3...

7.5CVSS5.8AI score0.00426EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/22 12:32 p.m.8 views

WordPress Thrive Quiz Builder plugin <= 10.9.3.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by VanTastic in WordPress Plugin Thrive Quiz Builder versions = 10.9.3.0...

9.8CVSS5.9AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/09 1:58 p.m.14 views

WordPress AIWU plugin <= 1.5.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by VanTastic in WordPress Plugin AIWU versions = 1.5.4...

9.3CVSS6.1AI score0.004EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/06/30 11:11 a.m.18 views

WordPress Kirki plugin <= 6.0.11 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by VanTastic in WordPress Plugin Kirki versions = 6.0.11...

6.5CVSS5.8AI score0.00332EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/06/25 2:23 p.m.16 views

WordPress Toolset Forms plugin <= 2.6.24 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by VanTastic in WordPress Plugin Toolset Forms versions = 2.6.24...

7.5CVSS5.8AI score0.00426EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/06/23 12:26 p.m.21 views

WordPress Dokan Pro plugin <= 5.0.4 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by VanTastic in WordPress Plugin Dokan Pro versions = 5.0.4...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/06/16 1:05 p.m.15 views

WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by VanTastic in WordPress Plugin JetEngine versions = 3.8.10...

7.1CVSS5.1AI score0.00142EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/06/16 1:01 p.m.11 views

WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by VanTastic in WordPress Plugin JetEngine versions = 3.8.10...

7.1CVSS5.1AI score0.00142EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/06/15 2:05 p.m.16 views

WordPress JetEngine plugin <= 3.8.10.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by VanTastic in WordPress Plugin JetEngine versions = 3.8.10.1...

9.3CVSS5.8AI score0.00283EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/06/10 9:07 a.m.17 views

WordPress Taskbuilder plugin <= 5.0.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by VanTastic in WordPress Plugin Taskbuilder versions = 5.0.7...

8.5CVSS5.9AI score0.0037EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/06/01 2:41 p.m.17 views

WordPress MW WP Form plugin <= 5.1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by VanTastic in WordPress Plugin MW WP Form versions = 5.1.3...

7.1CVSS5.8AI score0.0023EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder