WordPress EKC Tournament Manager plugin <= 2.2.1 - CSRF to Arbitrary File Upload vulnerability

CSRF to Arbitrary File Upload vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin EKC Tournament Manager versions = 2.2.1...

WordPress LaTeX2HTML plugin <= 2.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin LaTeX2HTML versions = 2.5.4...

WordPress AI Postpix plugin <= 1.1.8 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin AI Image Generator for Your Content & Featured Images – AI Postpix versions = 1.1.8...

WordPress INK Official plugin <= 4.1.2 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin INK Official versions = 4.1.2...

WordPress Web Bricks Addons for Elementor plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Web Bricks Addons for Elementor versions = 1.1.1...

WordPress DocumentPress plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin DocumentPress versions = 2.1...

WordPress Portfolleo plugin <= 1.2 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Portfolleo versions = 1.2...

WordPress SVG Captcha plugin <= 1.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin SVG Captcha versions = 1.0.11...

WordPress Code Generate plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Code Generate versions = 1.0...

WordPress Monitor.chat plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Monitor.chat versions = 1.1.1...

WordPress Banner Slider plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Banner Slider versions = 2.1...

WordPress myCred Elementor Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software myCred Elementor Type Plugin Vulnerable versions = 1.2.6 Fixed in 1.2.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49702 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 91faf3362d6d Credits João Pedro S Alcântara Kinorth Requir...

WordPress Simple Load More Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Simple Load More Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49662 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cc90907a6e66 Credits Mika Required privilege...

WordPress leenk.me Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)

Software leenk.me Type Plugin Vulnerable versions = 2.16.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49661 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9fc14cabc7ca Credits João Pedro S Alcântara Kinorth Required...

WordPress uCAT – Next Story Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

Software uCAT – Next Story Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49663 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b51e5248ad22 Credits Mika Required privilege...

WordPress SiteBuilder Dynamic Components plugin <= 1.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin SiteBuilder Dynamic Components versions = 1.0...

WordPress Back Link Tracker plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

CSRF to SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Back Link Tracker versions = 1.0.0...

WordPress SafetyForms plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

CSRF to SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin SafetyForms versions = 1.0.0...

WordPress Product Website Showcase plugin <= 1.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Product Website Showcase versions = 1.0...

WordPress photokit plugin <= 1.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin photokit versions = 1.0...