WordPress Workeera plugin < 1.0.6 - Subscriber+ Arbitrary File Read vulnerability

Subscriber+ Arbitrary File Read vulnerability discovered by Artus KG and Shhriyash in WordPress Plugin Workeera versions 1.0.6...

WordPress Workeera plugin < 1.0.6 - Subscriber+ Arbitrary File Deletion vulnerability

Subscriber+ Arbitrary File Deletion vulnerability discovered by Artus KG and Shhriyash in WordPress Plugin Workeera versions 1.0.6...

WordPress Workeera plugin < 1.0.6 - Subscriber+ Arbitrary File Upload vulnerability

Subscriber+ Arbitrary File Upload vulnerability discovered by Erwan LR WPScan in WordPress Plugin Workeera versions 1.0.6...

WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin WpEvently versions = 5.5.0...

WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin WpEvently versions = 5.5.0...

WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Md Mehedi Hasan in WordPress Plugin WP Job Portal versions = 2.5.9...

WordPress RestrictMate plugin < 1.3.0 - Unauthenticated Privilege Escalation to Administrator vulnerability

Unauthenticated Privilege Escalation to Administrator vulnerability discovered by João Ramos Maciel in WordPress Plugin RestrictMate versions 1.3.0...

WordPress WPCargo Track & Trace plugin < 8.0.4 - Unauthenticated SQL Injection via wpcargo_tracking_number vulnerability

Unauthenticated SQL Injection via wpcargotrackingnumber vulnerability discovered by Shivamani Vastrala in WordPress Plugin WPCargo Track & Trace versions 8.0.4...

WordPress ACF Extended plugin <= 0.9.2.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ACF Extended versions = 0.9.2.6...

WordPress All-in-One Video Gallery plugin < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' Parameter vulnerability

Subscriber+ Server-Side Request Forgery via 'vdl' Parameter vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin All-in-One Video Gallery versions 4.9.2...

WordPress MC4WP: Mailchimp for WordPress plugin <= 4.12.0 - Authenticated (Author+) Stored Cross-Site Scripting via Form Response Messages vulnerability

Authenticated Author+ Stored Cross-Site Scripting via Form Response Messages vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os - krei.dev | ogbuilders.io in WordPress Plugin MC4WP versions = 4.12.0...

WordPress Post Duplicator plugin <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution vulnerability

Missing Authorization to Authenticated Contributor+ Post Duplication with Arbitrary Author Attribution vulnerability discovered by Abi Wiranata in WordPress Plugin Post Duplicator versions = 3.0.11...

WordPress Advanced Classifieds & Directory Pro plugin < 3.4.3 - Unauthenticated Non-Public Listing Custom Field Disclosure vulnerability

Unauthenticated Non-Public Listing Custom Field Disclosure vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Advanced Classifieds & Directory Pro versions 3.4.3...

WordPress Block User Account plugin < 2.0.1 - Subscriber+ Account Block Bypass via Application Passwords vulnerability

Subscriber+ Account Block Bypass via Application Passwords vulnerability discovered by Farid Narimanov in WordPress Plugin Block User Account versions 2.0.1...

WordPress Contact Form to Any API plugin < 3.0.7 - Unauthenticated Sensitive File Disclosure via Predictable Filename vulnerability

Unauthenticated Sensitive File Disclosure via Predictable Filename vulnerability discovered by Farid Narimanov in WordPress Plugin Contact Form to Any API versions 3.0.7...

WordPress Salon Booking System - Free Version plugin < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking Wizard vulnerability

WordPress Salon Booking System - Free Version plugin 10.30.34 - Unauthenticated Booking Information Disclosure via Booking Wizard vulnerability discovered by Usama Arshad in WordPress Plugin Salon booking system versions 10.30.34...

WordPress Salon booking system plugin <= 10.31.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Daniel Dhaniswara in WordPress Plugin Salon booking system versions = 10.31.1...

WordPress Salon booking system plugin <= 10.31.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Salon booking system versions = 10.31.1...

WordPress CubeWP plugin <= 1.1.31 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin CubeWP versions = 1.1.31...

WordPress WP Photo Album Plus plugin < 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzips vulnerability

Unauthenticated Export ZIP File Deletion via delexportzips vulnerability discovered by Vaibhav Narkhede in WordPress Plugin WP Photo Album Plus versions 9.2.07.002...