WordPress Flexi – Guest Submit Plugin <= 4.28 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Flexi – Guest Submit versions = 4.28...

WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin Ultimate Bootstrap Elements for Elementor versions = 1.4.9...

WordPress FAT Cooming Soon plugin <= 1.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin FAT Cooming Soon versions = 1.1...

WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin JS Job Manager versions = 2.0.2...

WordPress IDonate plugin <= 2.1.17 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Dimas Maulana in WordPress Plugin IDonate versions = 2.1.17...

WordPress Real Estate Manager plugin <= 7.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Real Estate Manager versions = 7.3...

WordPress Testimonial Slider and Showcase Pro plugin <= 2.3.15 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Testimonial Slider And Showcase Pro versions = 2.3.15...

WordPress Duplicate Title Checker Plugin <= 1.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Duplicate Title Checker versions = 1.2...

WordPress Error Log Viewer By WP Guru plugin <= 1.0.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Aiden Thái An in WordPress Plugin Error Log Viewer versions = 1.0.5...

WordPress Neon Product Designer Plugin <= 2.2.0 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by LVT-tholv2k in WordPress Plugin Neon Product Designer versions = 2.2.0...

WordPress WP Online Users Stats plugin <= 1.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tran Nguyen Bao Khanh in WordPress Plugin WP Online Users Stats versions = 1.0.0...

WordPress Print Science Designer plugin <= 1.3.155 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Print Science Designer versions = 1.3.155...

WordPress Build App Online Plugin <= 1.0.23 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Build App Online versions = 1.0.23...

WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by LVT-tholv2k in WordPress Plugin WP-BusinessDirectory versions = 3.1.2...

WordPress Oxygen MyData for WooCommerce plugin <= 1.0.64 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by LVT-tholv2k in WordPress Plugin Oxygen MyData for WooCommerce versions = 1.0.64...

WordPress Database Toolset Plugin <= 1.8.4 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by LVT-tholv2k in WordPress Plugin Database Toolset versions = 1.8.4...

WordPress Simple WP Events plugin <= 1.8.17 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Mika in WordPress Plugin Simple WP Events versions = 1.8.17...

WordPress WPSmartContracts plugin <= 2.0.12 - SQL Injection vulnerability

SQL Injection vulnerability discovered by NAWardRox in WordPress Plugin WPSmartContracts versions = 2.0.12...

Remote Desktop Client RCE Vulnerability (Apr 2025) - Windows

Remote Desktop Client is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Bulk Product Sync plugin <= 8.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by theviper17 in WordPress Plugin Bulk Product Sync versions = 8.6...