WordPress Docpro plugin <= 2.0.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Docpro versions = 2.0.1...

WordPress CryoKey plugin <= 2.4 - Reflected Cross-Site Scripting via 'ckemail' Parameter vulnerability

Reflected Cross-Site Scripting via 'ckemail' Parameter vulnerability discovered by johska in WordPress Plugin CryoKey versions = 2.4...

WordPress Gotcha plugin <= 1.0.0 - Reflected Cross-Site Scripting via menu Parameter vulnerability

Reflected Cross-Site Scripting via menu Parameter vulnerability discovered by johska in WordPress Plugin Gotcha versions = 1.0.0...

WordPress Secure Invites plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Secure Invites versions = 1.3...

horticus.biz Cross Site Scripting vulnerability OBB-4038403

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Random Quotes Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin Random Quotes versions = 1.3...

WordPress Zielke Design Project Gallery plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Zielke Design Project Gallery versions = 2.5.0...

WordPress LIVE TV plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin LIVE TV versions = 1.2...

WordPress Ads24 Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin Ads24 Lite versions = 1.0...

WordPress Sleekplan plugin <= 0.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin Sleekplan versions = 0.2.0...

WordPress Já-Já Pagamentos for WooCommerce plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Zlrqh Patchstack Alliance in WordPress Plugin Já-Já Pagamentos for WooCommerce versions = 1.3.0...

WordPress pixelstats plugin <= 0.8.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin pixelstats versions = 0.8.2...

WordPress Realteo plugin <= 1.2.8 - Authentication Bypass via 'do_register_user' vulnerability

Authentication Bypass via 'doregisteruser' vulnerability discovered by Tonn in WordPress Plugin Realteo versions = 1.2.8...

Ubuntu: Security Advisory (USN-7325-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Design Comuni Italia theme <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Filippo Decortes in WordPress Theme Design Comuni Italia versions = 1.1.1...

CVE-2024-8402

Removed by vendor...

WordPress Simple Photo Feed Plugin <= 1.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Psai in WordPress Plugin Simple Photo Feed versions = 1.4.0...

WordPress Workreap plugin <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover vulnerability

Unauthenticated Privilege Escalation via Account Takeover vulnerability discovered by Tonn in WordPress Plugin Workreap theme's plugin versions = 3.2.5...

WordPress Tabbed Login Widget plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Tabbed Login Widget versions = 1.1.2...

WordPress Custom Dashboard Page plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Custom Dashboard Page versions = 1.0...