848875 matches found
WordPress ACF: Google Font Selector plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin ACF: Google Font Selector versions = 3.0.1...
WordPress Anything Popup plugin <= 7.3 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Anything Popup versions = 7.3...
WordPress AnalyticsWP <= 2.1.2 - SQL Injection Vulnerability
SQL Injection Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin AnalyticsWP versions = 2.1.2...
ktarena.com Cross Site Scripting vulnerability OBB-4047898
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
krucemburk.shm.cz Cross Site Scripting vulnerability OBB-4047889
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
kool1079.com Cross Site Scripting vulnerability OBB-4047862
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
keyw.com Cross Site Scripting vulnerability OBB-4047760
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Grand Restaurant WordPress Theme <= 7.0 is vulnerable to PHP Object Injection
Software Grand Restaurant WordPress Type Theme Vulnerable versions = 7.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-39348 Patch priority High CVSS severity High 9.8 Developer EPC PSID c0bb2279949a Credits Ananda Dhakal Patchstack Required privilege...
WordPress Xews Lite Theme <= 1.0.9 is vulnerable to Local File Inclusion
Software Xews Lite Type Theme Vulnerable versions = 1.0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-39383 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID c141546901cd Credits Dimas Maulana Required privilege Unauthenticated...
jw-elektronik.de Cross Site Scripting vulnerability OBB-4047624
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
jingfan-ps.com Cross Site Scripting vulnerability OBB-4047583
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WPAMS versions = 44.0 17-08-2023...
WordPress Smart Sections Theme Builder - WPBakery Page Builder Addon plugin <= 1.7.8 - PHP Object Injection vulnerability
WordPress Smart Sections Theme Builder - WPBakery Page Builder Addon plugin = 1.7.8 - PHP Object Injection vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin Smart Sections Theme Builder - WPBakery Page Builder Addon versions = 1.7.8...
WordPress Simple Maps plugin <= 0.98 - CSRF to XSS vulnerability
CSRF to XSS vulnerability discovered by johska Patchstack Alliance in WordPress Plugin Simple Maps versions = 0.98...
WordPress WP Post to PDF Enhanced plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nabil Irawan Patchstack Alliance in WordPress Plugin WP Post to PDF Enhanced versions = 1.1.1...
WordPress Dashboard Notepads plugin <= 1.2.1 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by johska Patchstack Alliance in WordPress Plugin Dashboard Notepads versions = 1.2.1...
WordPress Rating by BestWebSoft plugin <= 1.7 - PHP Object Injection Vulnerability
PHP Object Injection Vulnerability discovered by Le Ngoc Anh in WordPress Plugin Rating by BestWebSoft versions = 1.7...
WordPress Modal Survey plugin <= 2.0.2.0.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin Modal Survey versions = 2.0.2.0.1...
WordPress Ultimate Member plugin <= 2.10.1 - Unauthenticated Blind SQL Injection vulnerability
Unauthenticated Blind SQL Injection vulnerability discovered by Muhamad Visat in WordPress Plugin Ultimate Member versions = 2.10.1...