WordPress PWA For WP & AMP plugin < 1.7.72 Administrator+ Stored XSS vulnerability

WordPress PWA For WP & AMP plugin 1.7.72 Administrator+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin PWA for WP & AMP versions 1.7.72...

WordPress Stylish Price List plugin < 7.1.8 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Stylish Price List versions 7.1.8...

WordPress Simple Video Directory plugin < 1.4.3 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Project Black in WordPress Plugin Simple Video Directory versions 1.4.3...

WordPress DL Verification plugin <= 1.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin DL Verification versions = 1.2...

WordPress Offload Videos – Bunny.net, AWS S3 plugin <= 1.0.1 Subscriber+ CSRF vulnerability

Bunny.net, AWS S3 plugin = 1.0.1 Subscriber+ CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin Offload Videos – Bunny.net, AWS S3 versions = 1.0.1...

WordPress PVN Auth Popup plugin <= 1.0.0 - Contributor+ XSS via Shortcode vulnerability

Contributor+ XSS via Shortcode vulnerability discovered by Bob Matyas in WordPress Plugin PVN Auth Popup versions = 1.0.0...

WordPress PVN Auth Popup plugin <= 1.0.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin PVN Auth Popup versions = 1.0.0...

WordPress MapFig Studio plugin <= 0.2.1 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin MapFig Studio versions = 0.2.1...

WordPress Profile Builder plugin <= 3.12.0 - Admin+ Stored Cross Site Scripting vulnerability

Admin+ Stored Cross Site Scripting vulnerability discovered by John Castro in WordPress Plugin Profile Builder versions = 3.12.0...

WordPress WP Content Copy Protection & No Right Click (premium) plugin <= 15.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin WP Content Copy Protection & No Right Click premium versions = 15.0...

WordPress WP Content Copy Protection & No Right Click (premium) plugin < 15.3 - Open Redirect vulnerability

Open Redirect vulnerability discovered by Esther Nambuya in WordPress Plugin WP Content Copy Protection & No Right Click premium versions 15.3...

WordPress profilepro plugin <= 1.3 - Subscriber+ Stored Cross Site Scripting vulnerability

Subscriber+ Stored Cross Site Scripting vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin profilepro versions = 1.3...

WordPress kbucket plugin < 4.1.6 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin KBucket versions 4.1.6...

WordPress ImageMagick Engine plugin < 1.7.11 - Administrator+ OS Command Injection vulnerability

Administrator+ OS Command Injection vulnerability discovered by Chaiwat Thongyaem in WordPress Plugin ImageMagick Engine versions 1.7.11...

WordPress CTT Expresso para WooCommerce plugin < 3.2.13 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin CTT Expresso para WooCommerce versions 3.2.13...

WordPress DL Yandex Metrika plugin <= 1.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin DL Yandex Metrika versions = 1.2...

WordPress Tracking Code Manager plugin < 2.3.0- Admin+ Stored Cross-Site Scripting vulnerability

WordPress Tracking Code Manager plugin 2.3.0- Admin+ Stored Cross-Site Scripting vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Tracking Code Manager versions 2.3.0...

WordPress Push Notification for Post and BuddyPress plugin <= 1.93 - Multiple Unauthenticated SQLi vulnerability

Multiple Unauthenticated SQLi vulnerability discovered by Project Black in WordPress Plugin Push Notification for Post and BuddyPress versions = 1.93...

WordPress If-So Dynamic Content Personalization plugin < 1.8.0.3 - Contributor+ Shortcode Stored XSS vulnerability

Contributor+ Shortcode Stored XSS vulnerability discovered by Felipe Caon in WordPress Plugin If-So Dynamic Content Personalization versions 1.8.0.3...

WordPress CM Tooltip Glossary plugin < 4.3.4 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Felipe Caon in WordPress Plugin CM Tooltip Glossary versions 4.3.4...