WordPress Salon Booking Wordpress plugin <= 10.10.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyễn Trung Kiên anhchangmutrang in WordPress Plugin Salon Booking Pro versions = 10.10.2...

WordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nhat Anh Huynh in WordPress Plugin Video Player & FullScreen Video Background versions = 2.4.1...

WordPress ProfileGrid plugin <= 5.9.5.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin ProfileGrid versions = 5.9.5.1...

CVE-2025-46805

Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root...

WordPress N360 | Splash Screen plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin N360 | Splash Screen versions = 1.0.6...

WordPress WP-CRM System plugin <= 3.4.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ngo Bui Truong Vu in WordPress Plugin WP-CRM System versions = 3.4.5...

WordPress YaySMTP plugin <= 2.6.4 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by ChuongVN in WordPress Plugin YaySMTP versions = 2.6.4...

WordPress Login Lockdown & Protection plugin <= 2.11 - Missing Authorization to Authenticated (Subscriber+) Arbitrary IP Whitelisting vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary IP Whitelisting vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Login Lockdown versions = 2.11...

WordPress Absolute Links plugin <= 1.1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by 0x1ceKing Patchstack Alliance in WordPress Plugin Absolute Links versions = 1.1.1...

WordPress WP Cookie Consent plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin WP Cookie Consent versions = 1.0...

WordPress Advanced lazy load plugin <= 1.6.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin Advanced lazy load versions = 1.6.0...

WordPress WordPress Simple PayPal Shopping Cart plugin <= 5.1.2 - Unauthenticated Product Price Manipulation vulnerability

Unauthenticated Product Price Manipulation vulnerability discovered by Jack Taylor in WordPress Plugin Simple Shopping Cart versions = 5.1.2...

CVE-2025-30719

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

WordPress AF Tell a Friend plugin <= 1.4 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin AF Tell a Friend versions = 1.4...

WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin News Kit Elementor Addons versions = 1.4.2...

WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin JS Job Manager versions = 2.0.2...

WordPress Welcome Bar plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by timomangcut in WordPress Plugin Welcome Bar versions = 2.0.4...

WordPress ABC Notation Plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin ABC Notation versions = 6.1.3...

WordPress Simple Fixed Notice Plugin <= 1.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Khang Duong in WordPress Plugin Simple Fixed Notice versions = 1.6...

WordPress BlockWheels plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab in WordPress Plugin BlockWheels versions = 1.0.2...