WordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin <= 19.9.0 - Incorrect Authorization to Authenticated (Contributor+) Plugin Settings Update vulnerability

Incorrect Authorization to Authenticated Contributor+ Plugin Settings Update vulnerability discovered by Amin Beheshti in WordPress Plugin Poll, Survey & Quiz Maker Plugin by Opinion Stage versions = 19.9.0...

WordPress WP Dummy Content Generator plugin <= 3.4.6 - Arbitrary User Deletion vulnerability

Arbitrary User Deletion vulnerability discovered by Mika in WordPress Plugin WP Dummy Content Generator versions = 3.4.6...

WordPress Yougler Blogger Profile Page plugin <= v1.01 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by johska in WordPress Plugin Yougler Blogger Profile Page versions v1.01...

WordPress Easy Flashcards plugin <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Easy Flashcards versions = 0.1...

WordPress WP Travel Engine plugin <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability

Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability discovered by mikemyers in WordPress Plugin WP Travel Engine versions = 6.5.1...

WordPress Traffic Monitor plugin <= 3.2.2 - Missing Authorization to Unauthenticated Settings Update vulnerability

Missing Authorization to Unauthenticated Settings Update vulnerability discovered by ch4r0n in WordPress Plugin Traffic Monitor versions = 3.2.2...

WordPress REST API | Custom API Generator For Cross Platform And Import Export In WP plugin <= 2.0.3 - Missing Authorization to Unauthenticated Privilege Escalation via process_handler Function vulnerability

Missing Authorization to Unauthenticated Privilege Escalation via processhandler Function vulnerability discovered by kr0d in WordPress Plugin REST API | Custom API Generator For Cross Platform And Import Export In WP versions = 2.0.3...

WordPress WP Sliding Login/Dashboard Panel plugin <= 2.1.1 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin WP Sliding Login/Dashboard Panel versions = 2.1.1...

WordPress Premmerce User Roles plugin <= 1.0.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Tran Tuan Dung domiee13 in WordPress Plugin Premmerce User Roles versions = 1.0.13...

B&R Automation Runtime Use of a Broken or Risky Cryptographic Algorithm (CVE-2024-8603)

B&R Automation Runtime and B&R mapp View generates self-signed certificates during the boot-up process if no certificates have been configured in the B&R Automation Studio project. These certificates are signed using an algorithm, which is no longer considered to be secure. This plugin only works...

WordPress Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal Plugin <= 16.8 is vulnerable to Broken Access Control

Software Malcure Malware Scanner — 1 Toolset for WordPress Malware Removal Type Plugin Vulnerable versions = 16.8 Fixed in 16.9 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID...

WordPress CubeWP Forms plugin <= 1.1.5 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Mika in WordPress Plugin CubeWP Forms versions = 1.1.5...

WordPress Arconix FAQ plugin <= 1.9.6 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Peter Thaleikis in WordPress Plugin Arconix FAQ versions = 1.9.6...

WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Marek Mikita in WordPress Plugin myCred versions = 2.9.4.2...

WordPress AFS Analytics plugin <= 4.21 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nabil Irawan in WordPress Plugin AFS Analytics versions = 4.21...

WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin myCred versions = 2.9.4.2...

WordPress Majestic Support plugin <= 1.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Fariq Fadillah Gusti Insani in WordPress Plugin Majestic Support versions = 1.1.0...

WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin MultiVendorX versions = 4.2.23...

WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Tran Tuan Dung domiee13 in WordPress Plugin Seriously Simple Podcasting versions = 3.13.0...

WordPress Workreap plugin <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account' vulnerability

Authentication Bypass via 'workreapverifyuseraccount' vulnerability discovered by Foxyyy in WordPress Plugin Workreap theme's plugin versions = 3.3.1...