WordPress XStore theme < 9.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme XStore versions 9.6...

WordPress XStore theme < 9.6.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme XStore versions 9.6.1...

WordPress UDesign Core plugin <= 4.14.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin UDesign Core versions = 4.14.0...

WordPress UDesign Core plugin <= 4.14.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin UDesign Core versions = 4.14.0...

WordPress Houzez Theme <= 4.1.1 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Houzez versions = 4.1.1...

WordPress Uncode theme < 2.9.4.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Uncode versions 2.9.4.4...

WordPress Mmm Unity Loader plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via attributes Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via attributes Parameter vulnerability discovered by muhammad yudha in WordPress Plugin Mmm Unity Loader versions = 1.0...

WordPress WP Store Locator plugin <= 2.2.260 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by muhammad yudha in WordPress Plugin WP Store Locator versions = 2.2.260...

WordPress e.nigma buttons plugin <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin enigma-buttons versions = 1.1.3...

WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Photography versions = 7.7.2...

WordPress Post Grid Master plugin <= 3.4.17 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Post Grid Master versions = 3.4.17...

WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Photography versions = 7.7.2...

CVE-1999-1590

Directory traversal vulnerability in Muhammad A. Muquit wwwcount Count.cgi 2.3 allows remote attackers to read arbitrary GIF files via ".." sequences in the image parameter, a different vulnerability than CVE-1999-0021...

WordPress EAN for WooCommerce plugin <= 5.4.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin EAN for WooCommerce versions = 5.4.6...

WordPress The Plus Addons for Elementor - Pro Plugin < 6.3.7 - Broken Access Control vulnerability

WordPress The Plus Addons for Elementor - Pro Plugin 6.3.7 - Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin The Plus Addons for Elementor Pro versions 6.3.7...

WordPress Contextual Related Posts plugin <= 4.0.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Contextual Related Posts versions = 4.0.2...

WordPress Awesome Wp Image Gallery plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Awesome Wp Image Gallery versions = 1.0...

WordPress User Profile Builder plugin <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by muhammad yudha in WordPress Plugin Profile Builder versions = 3.13.6...

WordPress m1.DownloadList plugin <= 0.24 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin m1.DownloadList versions = 0.24...

WordPress Magic Embeds plugin <= 3.1.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Magic Embeds versions = 3.1.2...