WordPress Cloak Front End Email <= 1.9.5 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by muhammad yudha Patchstack Alliance in WordPress Plugin Cloak Front End Email versions = 1.9.5...

WordPress wpLike2Get plugin <= 1.2.9 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by ch4r0n Patchstack Alliance in WordPress Plugin wpLike2Get versions = 1.2.9...

WordPress Name Directory plugin <= 1.30.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Name Directory versions = 1.30.0...

WordPress WP Logger plugin <= 2.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WP Logger versions = 2.2...

WordPress Booking and Rental Manager plugin <= 2.2.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Booking and Rental Manager versions = 2.2.8...

WordPress Eduma theme <= 5.6.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Eduma versions = 5.6.4...

WordPress BERTHA AI plugin <= 1.12.10.2 - Arbitrary Content Deletion Vulnerability

Arbitrary Content Deletion Vulnerability discovered by theviper17 in WordPress Plugin BERTHA AI versions = 1.12.10.2...

WordPress Advanced Google Maps plugin <= 5.8.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Anhchangmutrang Patchstack Alliance in WordPress Plugin Advanced Google Maps versions = 5.8.4...

WordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability

Broken Authentication Vulnerability discovered by astra.r3verii in WordPress Plugin Vitepos versions = 3.1.7...

WordPress Spice Blocks plugin <= 2.0.7.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Spice Blocks versions = 2.0.7.7...

WordPress Dashi plugin <= 3.1.8 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Dashi versions = 3.1.8...

WordPress AI Text to Speech plugin <= 3.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin AI Text to Speech versions = 3.0.3...

WordPress plugin Broken Links Remover 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress Eduma Theme <= 5.6.4 is vulnerable to Broken Access Control

Software Eduma Type Theme Vulnerable versions = 5.6.4 Fixed in 5.6.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-39460 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID a30089a9390c Credits Ananda Dhakal Patchstack Required...

PT-2025-17007 · Unknown · Rajesh Broken Links Remover

Name of the Vulnerable Software and Affected Versions: Rajesh Broken Links Remover versions 1.2.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.2.2 and earlier, update to a version that fixes this issu...

WordPress WP Simple Booking Calendar plugin <= 2.0.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Simple Booking Calendar versions = 2.0.13...

WordPress Bring Fraktguiden for WooCommerce plugin <= 1.11.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Bring Fraktguiden for WooCommerce versions = 1.11.4...

WordPress ActiveDEMAND plugin <= 0.2.46 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin ActiveDEMAND versions = 0.2.46...

WordPress Dynamic Post plugin <= 5.02 - Settings Change Vulnerability

Settings Change Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Dynamic Post versions = 5.02...

WordPress Slazzer Background Changer plugin <= 3.14 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Slazzer Background Changer versions = 3.14...