WordPress Legal Terms and Conditions Popup for User Login and WooCommerce Checkout – TPUL plugin <= 2.0.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Terms Popup On User Login versions = 2.0.8...

WordPress Bulk Featured Image plugin <= 1.2.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by timomangcut in WordPress Plugin Bulk Featured Image versions = 1.2.4...

WordPress WPSpeed plugin <= 2.6.5 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WPSpeed versions = 2.6.5...

WordPress Ebook Store plugin <= 5.8009 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by timomangcut in WordPress Plugin Ebook Store versions = 5.8009...

WordPress YaySMTP plugin <= 2.6.4 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by ChuongVN in WordPress Plugin YaySMTP versions = 2.6.4...

WordPress Instantio plugin <= 3.3.16 - Arbitrary File Upload Vulnerability

Arbitrary File Upload Vulnerability discovered by Ryan Kozak in WordPress Plugin Instantio versions = 3.3.16...

WordPress BEAF plugin <= 4.6.10 - Arbitrary File Upload Vulnerability

Arbitrary File Upload Vulnerability discovered by Ryan Kozak in WordPress Plugin BEAF versions = 4.6.10...

WordPress Wbcom Designs - Activity Link Preview For BuddyPress plugin <= 1.4.4 - Server Side Request Forgery (SSRF) Vulnerability

WordPress Wbcom Designs - Activity Link Preview For BuddyPress plugin = 1.4.4 - Server Side Request Forgery SSRF Vulnerability discovered by HLog in WordPress Plugin Wbcom Designs - Activity Link Preview For BuddyPress versions = 1.4.4...

WordPress SendPulse Email Marketing Newsletter plugin <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by jhhack in WordPress Plugin SendPulse Email Marketing Newsletter versions = 2.1.6...

WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Snurkeburk, SashaRyba in WordPress Plugin WP Compress versions = 6.30.30...

WordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerability

Race Condition Vulnerability discovered by Ibrahim Mohammad in WordPress Plugin Poll Maker versions = 5.7.7...

WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by tratt in WordPress Plugin Dynamic Pricing With Discount Rules for WooCommerce versions = 4.5.8...

WordPress weMail plugin <= 1.14.13 - Sensitive Data Exposure Vulnerability

Sensitive Data Exposure Vulnerability discovered by Denver Jackson in WordPress Plugin weMail versions = 1.14.13...

WordPress Cart tracking for WooCommerce plugin <= 1.0.17 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Ngo Bui Truong Vu in WordPress Plugin Cart tracking for WooCommerce versions = 1.0.17...

WordPress Graphina plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) to Local File Inclusion vulnerability

Cross Site Request Forgery CSRF to Local File Inclusion vulnerability discovered by timomangcut in WordPress Plugin Graphina versions = 3.0.4...

WordPress XT Event Widget for Social Events plugin <= 1.1.7 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by timomangcut in WordPress Plugin XT Event Widget for Social Events versions = 1.1.7...

WordPress Ovation Elements plugin <= 1.1.2 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by ch4r0n in WordPress Plugin Ovation Elements versions = 1.1.2...

WordPress GS Variation Swatches for WooCommerce plugin <= 3.0.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by ch4r0n in WordPress Plugin GS Variation Swatches for WooCommerce versions = 3.0.4...

WordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Bold Page Builder versions = 5.3.0...

WordPress Quran multilanguage Text & Audio plugin <= 2.3.23 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Quran multilanguage Text & Audio versions = 2.3.23...