WordPress Awesome Support plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability

Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability discovered by Tim Coen in WordPress Plugin Awesome Support versions = 6.3.1...

WordPress Photo Gallery plugin < 1.8.34 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Matthew Rollings in WordPress Plugin Photo Gallery by 10Web versions 1.8.34...

WordPress YayExtra <= 1.5.2 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin YayExtra versions = 1.5.2...

WordPress Actionwear products sync plugin <= 2.3.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Dimas Maulana in WordPress Plugin Actionwear products sync versions = 2.3.3...

WordPress RJ Quickcharts plugin <= 0.6.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin RJ Quickcharts versions = 0.6.1...

WordPress Ultimate Push Notifications plugin <= 1.2.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Ultimate Push Notifications versions = 1.2.0...

WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.2.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by NAWardRox in WordPress Plugin Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One versions = 2.2.6...

WordPress Ni WooCommerce Product Enquiry plugin <= 4.1.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Ni WooCommerce Product Enquiry versions = 4.1.8...

WordPress Import Export Suite for CSV and XML Datafeed plugin <= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by mikemyers in WordPress Plugin WP Ultimate CSV Importer versions = 7.19...

WordPress Import Export Suite for CSV and XML Datafeed plugin <= 7.19 - Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Authenticated Subscriber+ Arbitrary File Deletion vulnerability discovered by mikemyers in WordPress Plugin WP Ultimate CSV Importer versions = 7.19...

WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Aiden in WordPress Plugin Advanced WooCommerce Product Sales Reporting versions = 4.1.1...

WordPress RSVPMarker plugin <= 11.6.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Aiden in WordPress Plugin RSVPMarker versions = 11.6.7...

WordPress XV Random Quotes plugin <= 2.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Aiden in WordPress Plugin XV Random Quotes versions = 2.0.0...

WordPress WP AutoKeyword plugin <= 1.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin WP AutoKeyword versions = 1.0...

WordPress History Log by click5 plugin <= 1.0.13 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin History Log by click5 versions = 1.0.13...

WordPress Next-Cart Store to WooCommerce Migration plugin <= 3.9.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k in WordPress Plugin Next-Cart Store to WooCommerce Migration versions = 3.9.4...

WordPress Salesmate Add-On for Gravity Forms plugin <= 2.0.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Salesmate Add-On for Gravity Forms versions = 2.0.3...

WordPress CBX Poll plugin <= 2.0.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika in WordPress Plugin CBX Poll versions = 2.0.4...

WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin Vitepos versions = 3.1.4...

WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Psai in WordPress Plugin GTM Kit versions = 2.4.0...