WordPress Real Estate Manager plugin <= 7.3 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by theviper17 in WordPress Plugin Real Estate Manager versions = 7.3...

WordPress Contact Form 7 plugin <= 6.0.5 - Order Replay vulnerability

Order Replay vulnerability discovered by Asaf Mozes in WordPress Plugin Contact Form 7 versions = 6.0.5...

WordPress Giveaways and Contests by RafflePress plugin < 1.12.17 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Giveaways and Contests by RafflePress versions 1.12.17...

WordPress Contact Form by Supsystic plugin <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action vulnerability discovered by Tim Coen in WordPress Plugin Contact Form by Supsystic versions = 1.7.29...

WordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload Vulnerability

Arbitrary File Upload Vulnerability discovered by Anhchangmutrang in WordPress Plugin MapSVG versions = 8.6.4...

WordPress Feedify – Web Push Notifications plugin <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Feedify – Web Push Notifications versions = 2.4.5...

WordPress Office Locator plugin <= 1.3.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Office Locator versions = 1.3.0...

WordPress User Profile Builder plugin <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by muhammad yudha in WordPress Plugin Profile Builder versions = 3.13.6...

WordPress Simple Social Media Share Buttons plugin < 6.0.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Simple Social Media Share Buttons versions 6.0.0...

WordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin JS Job Manager versions = 2.0.2...

WordPress Widget for Social Page Feeds plugin < 6.4.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Widget for Social Page Feeds versions 6.4.2...

WordPress Kata Plus Plugin <= 1.5.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Le Ngoc Anh in WordPress Plugin Kata Plus versions = 1.5.3...

WordPress WP Optin Wheel Plugin <= 1.4.7 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Marek Mikita in WordPress Plugin WP Optin Wheel versions = 1.4.7...

WordPress Macro Calculator with Admin Email Optin & Data plugin <= 1.0 - Multiple Vulnerabilities vulnerability

Multiple Vulnerabilities vulnerability discovered by Deltree Patchstack Alliance in WordPress Plugin Macro Calculator with Admin Email Optin & Data versions = 1.0...

WordPress Sign-up Sheets plugin <= 2.3.0.1 - Shortcode Injection vulnerability

Shortcode Injection vulnerability discovered by Phan Trong Quan - VNPT Cyber Immunity in WordPress Plugin Sign-up Sheets versions = 2.3.0.1...

WordPress PDF 2 Post Plugin <= 2.4.0 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by Le Ngoc Anh in WordPress Plugin PDF 2 Post versions = 2.4.0...

WordPress Team Members plugin <= 3.4.4 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Team Members Plugin versions = 3.4.4...

WordPress WooMS Plugin <= 9.12 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin WooMS versions = 9.12...

WordPress uListing plugin <= 2.2.0 - Deserialization of untrusted data vulnerability

Deserialization of untrusted data vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin uListing versions = 2.2.0...

WordPress hockeydata LOS plugin <= 1.2.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin hockeydata LOS versions = 1.2.4...