WordPress Ultimate Blocks plugin <= 3.3.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Ultimate Blocks versions = 3.3.0...

WordPress WooCommerce Checkout & Funnel Builder by FunnelKit plugin < 3.10.2 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by Francisco Alisson in WordPress Plugin Funnel Builder by FunnelKit versions 3.10.2...

WordPress Popup Box plugin < 4.7.8 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Popup box versions 4.7.8...

WordPress eaSYNC plugin < 1.3.15 - Subscriber+ PayPal Settings Update vulnerability

Subscriber+ PayPal Settings Update vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin eaSYNC versions 1.3.15...

WordPress Polls CP plugin <= 1.0.75 - Admin+ Stored Cross-Site Scripting vulnerability

Admin+ Stored Cross-Site Scripting vulnerability discovered by Chinmay Vishwas Divekar in WordPress Plugin CP Polls versions = 1.0.75...

WordPress Ajax Search Lite plugin <= 4.12.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Ajax Search Lite versions = 4.12.2...

WordPress GDPR Cookie Consent plugin <= 2.6.0 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Zitec/Teodora Jilaveanu in WordPress Plugin GDPR Cookie Consent versions = 2.6.0...

WordPress Simple Job Board plugin < 2.12.6 - Unauthenticated Resumes Download vulnerability

Unauthenticated Resumes Download vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Simple Job Board versions 2.12.6...

WordPress Tracking Code Manager plugin < 2.3.0- Admin+ Stored Cross-Site Scripting vulnerability

WordPress Tracking Code Manager plugin 2.3.0- Admin+ Stored Cross-Site Scripting vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Tracking Code Manager versions 2.3.0...

WordPress Push Notification for Post and BuddyPress plugin <= 1.93 - Multiple Unauthenticated SQLi vulnerability

Multiple Unauthenticated SQLi vulnerability discovered by Project Black in WordPress Plugin Push Notification for Post and BuddyPress versions = 1.93...

WordPress LearnPress plugin < 4.2.7.5.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin LearnPress versions 4.2.7.5.1...

WordPress Prisna GWT plugin < 1.4.14 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Prisna GWT – Google Website Translator versions 1.4.14...

WordPress JSFiddle Shortcode plugin < 1.1.3 - Contributor+ XSS via Shortcode vulnerability

Contributor+ XSS via Shortcode vulnerability discovered by Bob Matyas in WordPress Plugin JSFiddle Shortcode versions 1.1.3...

WordPress Auto Prune Posts plugin < 3.0.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Auto Prune Posts versions 3.0.0...

WordPress ApplyOnline – Application Form Builder and Manager plugin < 2.6.3 - Unauthenticated Application File Access vulnerability

Unauthenticated Application File Access vulnerability discovered by Arian Mosallah in WordPress Plugin ApplyOnline versions 2.6.3...

WordPress Jupiterx Core plugin <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Inline SVG vulnerability discovered by stealthcopter in WordPress Plugin JupiterX Core versions = 4.8.12...

WordPress Simple Lightbox plugin < 2.9.4 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Pierre Rudloff in WordPress Plugin Simple Lightbox versions 2.9.4...

WordPress Travelpayouts plugin < 1.1.13 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Erwan LR WPScan in WordPress Plugin Travelpayouts versions 1.1.13...

WordPress Pinterest Automatic Pin plugin <= 4.19.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Anhchangmutrang in WordPress Plugin Pinterest Automatic Pin versions = 4.19.0...

WordPress Sharespine Woocommerce Connector plugin <= 4.7.55 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by ch4r0n in WordPress Plugin Sharespine Woocommerce Connector versions = 4.7.55...