WordPress Download Manager plugin <= 3.2.98 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Download Manager versions = 3.2.98...

WordPress GamiPress - Reset User plugin <= 1.0.0 - GamiPress User Data Removal via CSRF vulnerability

WordPress GamiPress - Reset User plugin = 1.0.0 - GamiPress User Data Removal via CSRF vulnerability discovered by Norbert Hofmann in WordPress Plugin GamiPress - Reset User versions = 1.0.0...

WordPress BabelZ – Google Translate Widget plugin <= 1.1.5 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Daniel Ruf in WordPress Plugin BabelZ versions = 1.1.5...

WordPress Ntz Antispam plugin <= 2.0e - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Ntz Antispam versions = 2.0e...

WordPress JavaScript Logic plugin <= 0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Daniel Ruf in WordPress Plugin JavaScript Logic versions = 0.1...

WordPress PeoplePond plugin <= 1.1.9 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Daniel Ruf in WordPress Plugin PeoplePond versions = 1.1.9...

WordPress Widgets Reset plugin <= 0.1 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Widgets Reset versions = 0.1...

WordPress Custom Author Base plugin <= 1.1.1 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Custom Author Base versions = 1.1.1...

WordPress Smooth Gallery Replacement plugin <= 1.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Daniel Ruf in WordPress Plugin Smooth Gallery Replacement versions = 1.0...

WordPress Secure Downloads plugin < 1.2.3 - Admin+ Arbitrary File Download vulnerability

Admin+ Arbitrary File Download vulnerability discovered by Emiliano Versini in WordPress Plugin Secure Downloads versions 1.2.3...

WordPress Sensei LMS plugin < 4.20.0 - Teacher+ Users Email Address Disclosure vulnerability

Teacher+ Users Email Address Disclosure vulnerability discovered by Li Xuhang in WordPress Plugin Sensei LMS versions 4.20.0...

WordPress Wordpress Clicksold IDX Plugin plugin <= 1.90 - Admin+ XSS vulnerability

Admin+ XSS vulnerability discovered by Amandeep Singh Banga in WordPress Plugin Clicksold IDX versions = 1.90...

WordPress Simple Job Board plugin < 2.12.6 - Unauthenticated Resumes Download vulnerability

Unauthenticated Resumes Download vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Simple Job Board versions 2.12.6...

WordPress Simple Job Board plugin < 2.12.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Simple Job Board versions 2.12.2...

WordPress PWA For WP & AMP plugin < 1.7.72 Administrator+ Stored XSS vulnerability

WordPress PWA For WP & AMP plugin 1.7.72 Administrator+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin PWA for WP & AMP versions 1.7.72...

WordPress Stylish Price List plugin < 7.1.8 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Stylish Price List versions 7.1.8...

WordPress Simple Video Directory plugin < 1.4.3 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Project Black in WordPress Plugin Simple Video Directory versions 1.4.3...

WordPress DL Verification plugin <= 1.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin DL Verification versions = 1.2...

WordPress Offload Videos – Bunny.net, AWS S3 plugin <= 1.0.1 Subscriber+ CSRF vulnerability

Bunny.net, AWS S3 plugin = 1.0.1 Subscriber+ CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin Offload Videos – Bunny.net, AWS S3 versions = 1.0.1...

WordPress PVN Auth Popup plugin <= 1.0.0 - Contributor+ XSS via Shortcode vulnerability

Contributor+ XSS via Shortcode vulnerability discovered by Bob Matyas in WordPress Plugin PVN Auth Popup versions = 1.0.0...