EUVD-2026-51939

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...

CVE-2026-6441 Canto <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Setting Modification

The Canto plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 3.1.1. This is due to the absence of any capability check or nonce verification in the updateOptions function, which is exposed via two AJAX hooks: wpajaxupdateOptions class-canto.php line 231 an...

PT-2025-51049

The 404 Solution plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This is due to improper sanitization of the filterText paramet...

WordPress Plugin 404: Solution for SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin 404...

PT-2024-17288

Name of the Vulnerable Software and Affected Versions RapidLoad – Optimize Web Vitals Automatically plugin for WordPress versions prior to 2.4.3 Description The issue concerns unauthorized access and modification of data due to a missing capability check in several functions, including uucss data...

PT-2024-17398

Name of the Vulnerable Software and Affected Versions WPC Order Notes for WooCommerce plugin for WordPress versions up to, and including, 1.5.2 Description The issue is due to missing or incorrect nonce validation on the ajax update order note function, making it possible for unauthenticated...

WordPress Plugin Ovic Responsive WPBakery Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Ovic Responsive...

CVE-2022-48012

Opencats v0.9.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /opencats/index.php?m=settings&a=ajaxtagsupd...

PT-2023-2171

Name of the Vulnerable Software and Affected Versions Barracuda CloudGen WAN versions prior to 8 webui-sdwan-1089-8.3.1-174141891 Description The vulnerability is related to insufficient protection of the web interface structure in Barracuda CloudGen WAN when handling the /ajax/update certificate...

VulnCheck KEV: CVE-2016-10972

The newspaper theme before 6.7.2 for WordPress has a lack of options access control via tdajaxupdatepanel...

CVE-2022-1393

The WP Subtitle WordPress plugin before 3.4.1 adds a subtitle field and provides a shortcode to display it via wpsubtitle. The subtitle is stored as a custom post meta with the key: "wpssubtitle", which is sanitized upon post save/update, however is not sanitized when updating it directly from th...

WordPress plugin Post Grid has a cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the...

PT-2019-7765

Name of the Vulnerable Software and Affected Versions Newspaper theme versions prior to 6.7.2 Description The issue is related to a lack of options access control via td ajax update panel. Recommendations For versions prior to 6.7.2, update to version 6.7.2 or later to resolve the issue...

Denial Of Service (DoS)

cumin is vulnerable to denial of service DoS attacks. The vulnerability exists as Cumin, as used in Red Hat Enterprise MRG 2.4, allows remote attackers to cause a denial of service CPU and memory consumption via a crafted Ajax update request...

PT-2018-10405

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS versions prior to 7.23 Description The issue allows an attacker to perform an unauthenticated untrusted file upload. This is achieved through the update system, specifically via the "include/ajax/update manager.ajax" API...

PT-2018-6600

Name of the Vulnerable Software and Affected Versions: Muviko version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the email parameter to "login.php", the season id parameter to "themes/flixer/ajax/loa...

CVE-2016-10148

The CVE-2016-10148 entry concerns WordPress before 4.6. The vulnerable component is wp_ajax_update_plugin in wp-admin/includes/ajax-actions.php. The root cause is that a get_plugin_data call is performed before checking the update_plugins capability, allowing remote authenticated users to bypass ...

CVE-2016-6897

Cross-site request forgery CSRF vulnerability in the wpajaxupdateplugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the checkajaxreferer...

PT-2017-9052

Name of the Vulnerable Software and Affected Versions WordPress version 4.5.3 Description A directory traversal issue exists in the wp ajax update plugin function, allowing remote authenticated users to cause a denial of service or read certain text files by including a .. dot dot in the plugin...

PT-2017-9053

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.6 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of subscribers for certain operations by leveraging a late call to the check ajax referer...