WordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Prissy in WordPress Plugin Xpro Addons For Beaver Builder Lite versions = 1.5.5...

WordPress WP-PManager plugin <= 1.2 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by Bob Matyas in WordPress Plugin WP-PManager versions = 1.2...

WordPress WP-PManager plugin <= 1.2 - Category Deletion via CSRF vulnerability

Category Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP-PManager versions = 1.2...

WordPress WooCommerce Checkout & Funnel Builder by FunnelKit plugin < 3.10.2 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by Francisco Alisson in WordPress Plugin Funnel Builder by FunnelKit versions 3.10.2...

WordPress Plugin Oficial – Getnet para WooCommerce plugin < 1.8.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Plugin Oficial – Getnet para WooCommerce versions 1.8.1...

WordPress Plugin Oficial – Getnet para WooCommerce plugin < 1.8.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Plugin Oficial – Getnet para WooCommerce versions 1.8.1...

WordPress wooexim plugin <= 5.0.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin WOOEXIM versions = 5.0.0...

WordPress Badgearoo plugin <= 1.0.14 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Badgearoo versions = 1.0.14...

WordPress Spiritual Gifts Survey plugin <= 0.9.10 - Unauthenticated CSRF to XSS vulnerability

Unauthenticated CSRF to XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Spiritual Gifts Survey versions = 0.9.10...

WordPress ChatBot plugin < 6.2.4 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin ChatBot versions 6.2.4...

WordPress Salon Booking System plugin < 10.9.4 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Salon booking system versions 10.9.4...

WordPress Website File Changes plugin < 2.1.1 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability discovered by y4ng0615 in WordPress Plugin Melapress File Monitor versions 2.1.1...

WordPress Auto Affiliate Links plugin < 6.4.7 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by y4ng0615 in WordPress Plugin Auto Affiliate Links versions 6.4.7...

WordPress Taskbuilder plugin < 3.0.9 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by Bob Matyas in WordPress Plugin Taskbuilder versions 3.0.9...

WordPress EKC Tournament Manager plugin < 2.2.2 - Admin+ Arbitrary File Download vulnerability

Admin+ Arbitrary File Download vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin EKC Tournament Manager versions 2.2.2...

WordPress EKC Tournament Manager plugin < 2.2.2 - Create Tournaments/Teams via CSRF vulnerability

Create Tournaments/Teams via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin EKC Tournament Manager versions 2.2.2...

WordPress CYAN Backup plugin < 2.5.3 - Admin+ Stored XSS via General Settings vulnerability

Admin+ Stored XSS via General Settings vulnerability discovered by Bob Matyas in WordPress Plugin CYAN Backup versions 2.5.3...

WordPress Popup Box plugin < 4.7.8 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Popup box versions 4.7.8...

WordPress eaSYNC plugin < 1.3.15 - Subscriber+ PayPal Settings Update vulnerability

Subscriber+ PayPal Settings Update vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin eaSYNC versions 1.3.15...

WordPress Team Members Showcase plugin < 4.4.2 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Team versions 4.4.2...