WordPress Art Theme plugin <= 3.12.2.3 - Missing Authorization to Authenticated (Subscriber+) Theme Option Delete vulnerability

Missing Authorization to Authenticated Subscriber+ Theme Option Delete vulnerability discovered by István Márton in WordPress Plugin Art Theme versions = 3.12.2.3...

WordPress Modern Events Calendar Lite plugin <= 7.21.9 - Information Exposure vulnerability

Information Exposure vulnerability discovered by Abdullah Shittu in WordPress Plugin Modern Events Calendar Lite versions = 7.21.9...

WordPress HyperComments plugin <= 1.2.2 - Unauthenticated Arbitrary Options Update vulnerability

Unauthenticated Arbitrary Options Update vulnerability discovered by WordFence in WordPress Plugin HyperComments versions = 1.2.2...

WordPress Forminator plugin <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters vulnerability

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via id and data-size Parameters vulnerability discovered by Asaf Mozes in WordPress Plugin Forminator versions = 1.44.1...

WordPress PayU India plugin < 3.8.8 - Account Takeover vulnerability

Account Takeover vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin PayU India versions 3.8.8...

WordPress Password Policy Manager plugin <= 2.0.4 - Account Takeover vulnerability

Account Takeover vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Password Policy Manager versions = 2.0.4...

WordPress Foxit eSign for WordPress plugin <= 2.0.3 - Other Vulnerability Type Vulnerability

Other Vulnerability Type Vulnerability discovered by Denver Jackson in WordPress Plugin Foxit eSign for WordPress versions = 2.0.3...

WordPress WP Text Expander plugin <= 1.0.1 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Chu The Anh in WordPress Plugin WP Text Expander versions = 1.0.1...

WordPress Konami Easter Egg plugin <= v0.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Miki Iwamoto in WordPress Plugin Konami Easter Egg versions = v0.4...

WordPress Abbie Expander plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Chu The Anh Fore-Z co.ltd in WordPress Plugin Abbie Expander versions = 1.0.1...

WordPress Video Embeds plugin <= 0.1.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Chu The Anh Fore-Z co.ltd in WordPress Plugin Video Embeds versions = 0.1.1...

WordPress Wp Easy Allopass plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin Wp Easy Allopass versions = 4.1.1...

WordPress Atelier Create CV plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin Atelier Create CV versions = 1.1.5...

WordPress WP Security Master plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin WP Security Master versions = 1.0.2...

WordPress Interactive Regional Map of Florida plugin <= 1.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin Interactive Regional Map of Florida versions = 1.0...

WordPress Simple Nested Menu plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin Simple Nested Menu versions = 1.0...

WordPress Bacon Ipsum plugin <= 2.4 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin Bacon Ipsum versions = 2.4...

WordPress Interactive UK Regional Map plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin Interactive UK Regional Map versions = 2.0...

WordPress Admin Notes plugin <=1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin Admin Notes versions = 1.1...

WordPress Interactive Regional Map of Africa plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin Interactive Regional Map of Africa versions = 1.0...