154 matches found
WordPress UsersWP plugin <= 1.2.70 - Authenticated (Subscriber+) Arbitrary File Deletion vulnerability
Authenticated Subscriber+ Arbitrary File Deletion vulnerability discovered by daroo in WordPress Plugin UsersWP versions = 1.2.70...
WordPress Folders plugin <= 3.1.9 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by daroo in WordPress Plugin Folders versions = 3.1.9...
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 2.0.17...
WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin BP Better Messages versions = 2.15.27...
WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by daroo in WordPress Plugin RTMKit versions = 2.1.5...
WordPress LeadConnector plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin LeadConnector versions = 4.0.5...
WordPress SliceWP plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin SliceWP versions = 1.2.10...
WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Music Player for WooCommerce versions = 1.8.9...
WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability
SQL Injection vulnerability discovered by daroo in WordPress Plugin Like Button Rating versions = 2.6.61...
WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Stripe Payments versions = 2.1.2...
WordPress FreightCo theme <= 1.1.15 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by daroo in WordPress Theme FreightCo versions = 1.1.15...
WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability
SQL Injection vulnerability discovered by daroo in WordPress Plugin Directory Pro versions = 2.5.8...
WordPress Podlove Podcast Publisher plugin <= 4.5.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Podlove Podcast Publisher versions = 4.5.4...
WordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Swatchly – WooCommerce Variation Swatches for Products versions = 1.4.13...
WordPress SEO Plugin by Squirrly SEO plugin <= 14.2.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin SEO Plugin by Squirrly SEO versions = 14.2.2...
WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Newsletter versions = 9.3.3...
WordPress Templatiq plugin <= 0.2.5 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by daroo in WordPress Plugin Templatiq versions = 0.2.5...
WordPress Duitku Payment Gateway plugin <= 2.11.14 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by daroo in WordPress Plugin Duitku Payment Gateway versions = 2.11.14...
WordPress Extra Product Options & Add-Ons for WooCommerce plugin < 7.6 - Arbitrary File Download vulnerability
Arbitrary File Download vulnerability discovered by daroo in WordPress Plugin Extra Product Options & Add-Ons for WooCommerce versions 7.6...