WordPress DocCheck Login plugin <= 1.1.5 - Unauthorized Post Access vulnerability

Unauthorized Post Access vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin DocCheck Login versions = 1.1.5...

WordPress RD Contacto plugin <= 1.4 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin RD Contacto versions = 1.4...

WordPress Smart Docs plugin <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Smart Docs versions = 1.1.0...

WordPress Booking X plugin 1.0-1.1.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability

Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability discovered by kr0d in WordPress Plugin Booking X versions 1.0-1.1.2...

WordPress ProcessingJS for WordPress plugin <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin ProcessingJS for WordPress versions = 1.2.2...

WordPress AI Engine plugin <= 2.8.4 - Insecure OAuth Implementation vulnerability

Insecure OAuth Implementation vulnerability discovered by István Márton - Wordfence in WordPress Plugin AI Engine versions = 2.8.4...

WordPress VikRentCar Car Rental Management System plugin <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Upload vulnerability

Authenticated Administrator+ Arbitrary File Upload vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin VikRentCar versions = 1.4.3...

WordPress Migration, Backup, Staging – WPvivid Backup & Migration plugin <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload vulnerability

Authenticated Administrator+ Arbitrary File Upload vulnerability discovered by Ryan Kozak in WordPress Plugin WPvivid Backup and Migration versions = 0.9.116...

WordPress JKDEVKIT plugin <= 1.9.4 - Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Authenticated Subscriber+ Arbitrary File Deletion vulnerability discovered by Foxyyy in WordPress Plugin JKDEVKIT versions = 1.9.4...

WordPress AiBud WP plugin <= 1.9 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Ryan Kozak Patchstack Bug Bounty Program in WordPress Plugin AiBud WP versions = 1.9...

WordPress Radio Station plugin <= 2.5.12 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Radio Station versions = 2.5.12...

WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 7.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin WP Visitor Statistics Real Time Traffic versions = 7.8...

CVE-2025-6963

A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /myprofile.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.4.0 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by timomangcut in WordPress Plugin Printcart Web to Print Product Designer for WooCommerce versions = 2.4.0...

WordPress MF Plus WPML plugin <= 1.1 - Settings Change Vulnerability

Settings Change Vulnerability discovered by Mika in WordPress Plugin MF Plus WPML versions = 1.1...

WordPress Melapress File Monitor plugin < 2.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Melapress File Monitor versions 2.2.0...

WordPress Paytiko for WooCommerce plugin <= 1.3.21 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Paytiko for WooCommerce versions = 1.3.21...

WordPress WC Pickup Store plugin <= 1.8.9 - Settings Change Vulnerability

Settings Change Vulnerability discovered by Mika in WordPress Plugin WC Pickup Store versions = 1.8.9...

WordPress Allmart plugin <= 1.0.0 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Allmart versions = 1.0.0...

WordPress Easy Stripe plugin <= 1.1 - Remote Code Execution (RCE) Vulnerability

Remote Code Execution RCE Vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Easy Stripe versions = 1.1...