WordPress Exclusive Addons for Elementor plugin <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Expired Title vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Countdown Expired Title vulnerability discovered by Webbernaut in WordPress Plugin Exclusive Addons Elementor versions = 2.6.9.4...

WordPress Newspaper theme <= 12.6.5 - Authenticated Stored Cross-Site Scripting via Attachment Meta vulnerability

Authenticated Stored Cross-Site Scripting via Attachment Meta vulnerability discovered by István Márton in WordPress Theme Newspaper versions = 12.6.5...

WordPress tagDiv Composer plugin <= 4.8 - Authenticated Local File Inclusion via Shortcode vulnerability

Authenticated Local File Inclusion via Shortcode vulnerability discovered by István Márton in WordPress Plugin tagDiv Composer versions = 4.8...

CVE-2023-39367

An OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0 in QEMU. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

WordPress Essential Addons for Elementor plugin <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute vulnerability

Authenticated Contributor+ Store Cross-Site Scripting via Widget URL Attribute vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Essential Addons for Elementor versions = 5.9.14...

WordPress Otter Blocks plugin <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'titleTag' vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Otter - Gutenberg Block versions = 2.6.9...

WordPress Shortcodes and extra features for Phlox theme plugin <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Shortcodes and extra features for Phlox theme versions = 2.15.5...

WordPress Enhanced Media Library plugin <= 2.8.9 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Tim Coen in WordPress Plugin Enhanced Media Library versions = 2.8.9...

WordPress Shopping Cart & eCommerce Store plugin <= 5.6.3 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Krzysztof Zając in WordPress Plugin WP EasyCart versions = 5.6.3...

WordPress WPBakery Visual Composer plugin <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Post Author vulnerability discovered by Nikolas in WordPress Plugin WPBakery Page Builder versions = 7.5...

WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Widgets vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Pricing Widgets vulnerability discovered by Francesco Carlucci in WordPress Plugin WidgetKit versions = 2.5.1...

WordPress Elementor Addons by Livemesh plugin <= 8.3.6 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Livemesh Addons for Elementor versions = 8.3.6...

WordPress Elementor Addons by Livemesh plugin <= 8.3.6 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Plugin Livemesh Addons for Elementor versions = 8.3.6...

WordPress Bold Page Builder plugin <= 4.8.8 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by João Pedro Soares de Alcântara in WordPress Plugin Bold Page Builder versions = 4.8.8...

WordPress Premium Addons for Elementor plugin <= 4.10.27 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by Dau Hoang Tai in WordPress Plugin Premium Addons for Elementor versions = 4.10.27...

WordPress Soledad theme <= 8.4.5 - Authenticated Broken Access Control vulnerability

Authenticated Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Soledad versions = 8.4.5...

WordPress Ocean Extra plugin <= 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Ocean Extra versions = 2.2.6...

WordPress RSS Aggregator by Feedzy plugin <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Error Message vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Error Message vulnerability discovered by Colin Xu in WordPress Plugin Feedzy versions = 4.3.3...

WordPress Photo Gallery by 10Web plugin <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVG vulnerability

Authenticated Admin+ Stored Cross-Site Scripting via SVG vulnerability discovered by Jobert Krohnen in WordPress Plugin Photo Gallery by 10Web versions = 1.8.21...

WordPress Carousel, Slider, Gallery by WP Carousel plugin <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sp_wp_carousel_shortcode' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'spwpcarouselshortcode' vulnerability discovered by Phuoc Pham p3tl0v3r in WordPress Plugin Carousel, Slider, Gallery by WP Carousel versions = 2.6.3...