9812 matches found
PT-2026-49447
Subscriber Cross Site Scripting XSS in Contest Gallery = 28.1.6 versions...
PT-2026-49462
Subscriber Cross Site Scripting XSS in Modula Image Gallery = 2.14.23 versions...
PT-2026-49373
Subscriber Broken Authentication in FunnelKit Automations = 3.7.3 versions...
PT-2026-49431
Subscriber Broken Access Control in myCred = 3.0.3 versions...
PT-2026-49505
Subscriber Sensitive Data Exposure in Coupon Affiliates = 7.8.1 versions...
PT-2026-49428
Subscriber Sensitive Data Exposure in WP SMS = 7.2.1 versions...
PT-2026-49478
Subscriber Cross Site Scripting XSS in King Addons for Elementor = 51.1.62 versions...
PT-2026-49393
Subscriber Broken Access Control in Motors 1.4.107 versions...
PT-2026-49402
Subscriber Broken Access Control in RepairBuddy = 4.1132 versions...
PT-2026-49426
Subscriber Broken Access Control in ChatBot = 7.9.7 versions...
PT-2026-49344
Name of the Vulnerable Software and Affected Versions FV Flowplayer Video Player versions prior to 7.5.51.7212 Description Cross Site Scripting XSS is possible for users with the Subscriber role. This issue allows an attacker to inject malicious scripts into web pages viewed by other users...
PT-2026-49493
Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System = 3.3.6 versions...
PT-2026-49397
Subscriber Arbitrary File Upload in WpStream 4.11.2 versions...
PT-2026-49424
Subscriber Broken Authentication in AutomatorWP = 5.6.7 versions...
PT-2026-49405
Subscriber Broken Access Control in Ultra Addons for WPForms = 1.0.11 versions...
PT-2026-49484
Name of the Vulnerable Software and Affected Versions Visual Link Preview versions prior to 2.4.2 Description An issue in the plugin leads to the exposure of sensitive subscriber data. Recommendations Update to version 2.4.2 or later...
PT-2026-49523
Subscriber SQL Injection in WCMultiShipping = 3.0.2 versions...
PT-2026-49451
Subscriber Sensitive Data Exposure in Contest Gallery = 28.1.7 versions...