WordPress Graphina plugin <= 3.1.12 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Graphina – Charts and Graphs For Elementor versions = 3.1.12...

WordPress The7 theme <= 14.2.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bonds in WordPress Theme The7 versions = 14.2.2...

WordPress Autoship Cloud for WooCommerce Subscription Products plugin <= 2.17.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Averon Averenkov in WordPress Plugin Autoship Cloud for WooCommerce Subscription Products versions = 2.17.1...

WordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Easy Digital Downloads versions = 3.7.1...

WordPress WXD Backup Lite plugin <= 1.0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WXD Backup Lite versions = 1.0.2...

WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentBooking Pro versions 2.5.0...

WordPress WP2LEADS plugin <= 3.5.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by johska in WordPress Plugin WP2LEADS versions = 3.5.7...

CVE-2023-34965

CVE-2023-34965 SSPanel UIM एक बहुउद्देशीय एजेंसी सेवा बिक्री प्रबंधन प्रणाली है जो विशेष रूप से Shadowsocks / V2Ray / Trojan प्रोटोकॉल के लिए डिज़ाइन की गई है। SSPanel-Uim का 2023.3 से पहले का संस्करण /link/ इंटरफ़ेस तक पहुंच को प्रतिबंधित नहीं करता है,जिससे उपयोगकर्ता सदस्यता जानकारी का रिसाव हो...

WordPress Fluent Affiliate Pro plugin <= 1.6.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Affiliate Pro versions = 1.6.4...

WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ratchanon Chamnankit in WordPress Plugin WP Event Solution versions = 4.1.25...

CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit

वर्डप्रेस प्लगइन - एलिमेंटर 3.6.0 3.6.1 3.6.2 रिमोट कोड एक्ज़ीक्यूशन Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the...

CVE-2026-105421 WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kit Kit formerly ConvertKit for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit formerly ConvertKit for WooCommerce: from n/a through 2.2.0...

CVE-2026-105421 WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kit Kit formerly ConvertKit for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit formerly ConvertKit for WooCommerce: from n/a through 2.2.0...

CVE-2026-105421

The WordPress Kit (formerly ConvertKit) for WooCommerce plugin (versions

WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Kit formerly ConvertKit for WooCommerce versions = 2.2.0...

WordPress Morning for WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ParkHyunWoo in WordPress Plugin Morning for WooCommerce versions = 2.4.1...

stump-smartlist-bola

Stump: Smart List Takeover via Broken Access Control BOLA...

WordPress Wise Chat plugin <= 3.4.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by takito in WordPress Plugin Wise Chat versions = 3.4.3...

WordPress App for Cloudflare® plugin <= 1.10.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by takito in WordPress Plugin App for Cloudflare® versions = 1.10.1...

WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jakub Herman in WordPress Plugin PayPlug for WooCommerce Official versions = 3.1.0...