WordPress Quick Learn plugin <= 1.0.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Quick Learn versions = 1.0.1...

WordPress Xpresslane Fast Checkout plugin <= 1.0.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Xpresslane Fast Checkout versions = 1.0.0...

WordPress de:branding plugin <= 1.0.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin de:branding versions = 1.0.2...

WordPress AtaraPay WooCommerce Payment Gateway Plugin <= 2.0.13 is vulnerable to Cross Site Scripting (XSS)

Software AtaraPay WooCommerce Payment Gateway Type Plugin Vulnerable versions = 2.0.13 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52460 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4a92b5856e8e Credits Le Ngoc Anh...

WordPress Awesome Studio Plugin <= 2.4.4 is vulnerable to Cross Site Scripting (XSS)

Software Awesome Studio Type Plugin Vulnerable versions = 2.4.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52456 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 83cb8daf8eb9 Credits Le Ngoc Anh Required privilege...

WordPress Library Bookshelves Plugin <= 5.8 is vulnerable to Cross Site Scripting (XSS)

Software Library Bookshelves Type Plugin Vulnerable versions = 5.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52453 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 893d1f48a420 Credits Mika Required privilege...

WordPress GoQSmile Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software GoQSmile Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52455 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID dbb042e2576e Credits Mika Required privilege Unauthenticated...

WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Hakiduck Patchstack Alliance in WordPress Plugin Post SMTP versions = 2.9.9...

WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Jorge Diaz - ddiax Patchstack Alliance in WordPress Plugin WPDM – Premium Packages versions = 6.0.5...

WordPress WP Video Robot plugin <= 1.20.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin WordPress Video Robot - The Ultimate Video Importer versions = 1.20.0...

WordPress WP Quick Setup plugin <= 2.0 - Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerability

Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WP Quick Setup versions = 2.0...

WordPress Ads Booster by Ads Pro plugin <= 1.12 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Ads Booster by Ads Pro versions = 1.12...

WordPress Linear plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin Linear versions = 2.8.0...

WordPress wp-login customizer plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin wp-login customizer versions = 1.0...

WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Themify Builder versions = 7.6.5...

WordPress Debug Tool plugin <= 2.2 - Remote Code Execution vulnerability

Remote Code Execution vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Debug Tool versions = 2.2...

WordPress WDES Responsive Mobile Menu plugin <= 5.3.18 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WDES Responsive Mobile Menu versions = 5.3.18...

WordPress Airin Blog theme <= 1.6.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Theme Airin Blog versions = 1.6.1...

WordPress Xin theme <= 1.0.8.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Theme Xin versions = 1.0.8.1...

WordPress Push Notifications for WordPress by PushAssist plugin <= 3.0.8 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Push Notifications for WordPress by PushAssist versions = 3.0.8...