PT-2026-99494

Name of the Vulnerable Software and Affected Versions Download Manager WordPress plugin Pro edition versions prior to 7.5.6 Description The Pro edition of the plugin fails to sanitize and escape data submitted via the email-locked download subscription form before displaying it on an administrati...

CVE-2026-57707

The CVE-2026-57707 entry concerns WordPress Plugin Simple Business Directory Pro (versions up to 15.9.4) affected by an SQL Injection vulnerability. Affected component is the Simple Business Directory Pro plugin; root cause indicated as improper neutralization of special elements used in SQL comm...

CVE-2026-10735

A supply chain compromise of the ShapedPlugin build and distribution pipeline allowed attackers to inject a multi-stage backdoor into official Pro plugin updates distributed via the Easy Digital Downloads infrastructure. The affected products include Real Testimonials Pro (before 3.2.6), Product ...

CVE-2021-20749

Cross-site scripting vulnerability in Fudousan plugin ver5.7.0 and earlier, Fudousan Plugin Pro Single-User Type ver5.7.0 and earlier, and Fudousan Plugin Pro Multi-User Type ver5.7.0 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2025-32295: Missing Authorization

Missing Authorization vulnerability in wordpresschef Salon Booking Pro salon-booking-plugin-pro-cc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon Booking Pro: from n/a through = 10.10.2...

PT-2024-20262 · WordPress · Masterstudy Lms

Name of the Vulnerable Software and Affected Versions: MasterStudy LMS plugin for WordPress versions up to, and including, 3.3.1 Description: The issue is due to insufficient validation checks within the register user function called by the 'wp ajax nopriv stm lms register' AJAX action. This allo...

CVE-2021-20749

Cross-site scripting vulnerability in Fudousan plugin ver5.7.0 and earlier, Fudousan Plugin Pro Single-User Type ver5.7.0 and earlier, and Fudousan Plugin Pro Multi-User Type ver5.7.0 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20749: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Fudousan plugin ver5.7.0 and earlier, Fudousan Plugin Pro Single-User Type ver5.7.0 and earlier, and Fudousan Plugin Pro Multi-User Type ver5.7.0 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

PT-2021-14204

Name of the Vulnerable Software and Affected Versions: Fudousan plugin versions 5.7.0 and earlier Fudousan Plugin Pro Single-User Type versions 5.7.0 and earlier Fudousan Plugin Pro Multi-User Type versions 5.7.0 and earlier Description: A cross-site scripting issue allows a remote authenticated...