WordPress SEO Redirection plugin <= 6.3 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze Patchstack Red Team in WordPress SEO Redirection plugin versions = 6.3 Solution Update the WordPress SEO Redirection plugin to the latest available version at least 6.4...

WordPress Related Posts for WordPress plugin <= 2.0.4 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Related Posts for WordPress plugin versions = 2.0.4. Solution Update the WordPress Related Posts for WordPress plugin to the latest available version at least 2.0.5...

WordPress WP Login Security and History plugin <= 1.0 - Authenticated Persistent XSS & XFS vulnerabilities

Authenticated Persistent XSS & XFS vulnerabilities discovered by m0ze in WordPress WP Login Security and History plugin versions = 1.0. Solution This plugin has been closed as of April 5, 2021 and is not available for download. This closure is temporary, pending a full review...

WordPress Content Copy Protection & Prevent Image Save <= 1.3 - Authenticated Cross-Site Request Forgery (CSRF) vulnerability

Authenticated Cross-Site Request Forgery CSRF vulnerability discovered by m0ze in WordPress Content Copy Protection & Prevent Image Save versions = 1.3. Solution This plugin has been closed as of April 5, 2021 and is not available for download. This closure is temporary, pending a full review...

WordPress WP Login Security and History plugin <= 1.0 - Authenticated Cross-Site Request Forgery (CSRF) vulnerability

Authenticated Cross-Site Request Forgery CSRF vulnerability discovered by m0ze in WordPress WP Login Security and History plugin versions = 1.0. Solution This plugin has been closed as of April 5, 2021 and is not available for download. This closure is temporary, pending a full review...

WordPress Content Copy Protection & Prevent Image Save plugin <= 1.3 - Authenticated Persistent XSS & XFS vulnerabilities

Authenticated Persistent XSS & XFS vulnerabilities discovered by m0ze in WordPress Content Copy Protection & Prevent Image Save plugin versions = 1.3. Solution This plugin has been closed as of April 5, 2021 and is not available for download. This closure is temporary, pending a full review...

WordPress Findeo premium theme <= 1.2.6 - Authenticated Insecure Direct Object References (IDOR) vulnerability

Authenticated Insecure Direct Object References IDOR vulnerability discovered by m0ze Patchstack Red Team in WordPress Findeo premium theme versions = 1.2.6. Solution Update the WordPress Findeo premium theme to the latest available version at least 1.3.1...

WordPress Realteo premium plugin <= 1.2.3 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Realteo premium plugin versions = 1.2.3. Solution Update the WordPress Realteo premium plugin to the latest available version at least 1.2.4...

WordPress WorkScout premium theme <= 2.0.31 - Cross-Frame Scripting (XFS) vulnerability

Cross-Frame Scripting XFS vulnerability discovered by m0ze Patchstack Red Team in WordPress WorkScout premium theme versions = 2.0.31. Solution Update the WordPress WorkScout premium theme to the latest available version at least 2.0.32...

WordPress Listeo premium theme <= 1.6.07 - Authenticated Multiple Insecure Direct Object References (IDOR) vulnerabilities

Multiple Insecure Direct Object References IDOR vulnerabilities discovered by m0ze Patchstack Red Team in the WordPress Listeo premium theme versions = 1.6.07. Solution Update the WordPress Listeo premium theme to the latest available version at least 1.6.11...

WordPress EasyBook premium theme <= 1.2.1 - Persistent Cross-Site Scripting (XSS) vulnerability

Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress EasyBook premium theme versions = 1.2.1. Solution Update the WordPress EasyBook premium theme to the latest available version at least 1.2.2...

WordPress EasyBook premium theme <= 1.2.1 - Persistent Cross-Site Scripting (XSS) vulnerability

Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress EasyBook premium theme versions = 1.2.1. Solution Update the WordPress EasyBook premium theme to the latest available version at least 1.2.2...

WordPress Web Instant Messenger plugin <= 1.1.2 - Unauthenticated Persistent Cross-Site Scripting (XSS) vulnerability

Unauthenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze Ex.Mi in WordPress Web Instant Messenger plugin versions = 1.1.2. Solution 2021-03-19 - we were unable to find a patched version of this plugin. WordPress.org notice: "This plugin has been closed as of October 21...

WordPress LocalWeb All In One plugin <= 1.6.4 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered by m0ze Ex.Mi in WordPress LocalWeb All In One plugin versions = 1.6.4. Solution Update the WordPress LocalWeb All In One plugin to the latest available version at least 1.6.5...

WordPress Home Villas premium theme <= 2.1 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Home Villas premium theme versions = 2.1. Solution Update the WordPress Home Villas premium theme to the latest available version at least 2.2...

WordPress Jetapo premium theme <= 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Jetapo premium theme versions = 1.0. Solution Update the WordPress Jetapo premium theme to the latest available version at least 1.1...

WordPress Workup – Job Board premium theme <= 2.1.5 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Workup – Job Board premium theme versions = 2.1.5. Solution Update the WordPress Workup – Job Board premium theme to the latest available version at least 2.1.6...

WordPress Findgo premium theme <= 1.3.30 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Findgo premium theme versions = 1.3.30. Solution Update the WordPress Findgo premium theme to the latest available version at least 1.3.32...

WordPress InJob premium theme <= 3.4.0 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress InJob premium theme versions = 3.4.0. Solution Update the WordPress InJob premium theme to the latest available version at least 3.4.1...

WordPress JobSearch premium plugin <= 1.5.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability (job pages)

Authenticated Persistent Cross-Site Scripting XSS vulnerability job pages discovered by m0ze in WordPress JobSearch premium plugin versions = 1.5.2. Solution Update the WordPress JobSearch premium plugin to the latest available version at least 1.5.3...