100029 matches found
WordPress Builderall for WordPress plugin < 3.0.2 - Unauthenticated OAuth Access Token Poisoning via Public REST Routes vulnerability
Unauthenticated OAuth Access Token Poisoning via Public REST Routes vulnerability discovered by Pablo González and Fran Ramírez in WordPress Plugin Builderall Builder for WordPress versions 3.0.2...
WordPress MonsterInsights plugin < 11.1.0 - Unauthenticated Measurement Protocol Secret Update via Empty-Key HMAC Bypass vulnerability
Unauthenticated Measurement Protocol Secret Update via Empty-Key HMAC Bypass vulnerability discovered by ng Tiến Dũng in WordPress Plugin Google Analytics by Monster Insights versions 11.1.0...
WordPress WPvivid Backup & Migration plugin < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connect vulnerability
Unauthenticated Path Traversal via sendtositeconnect vulnerability discovered by Nir Yehoshua in WordPress Plugin WPvivid Backup and Migration versions 0.9.131...
WordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by moonge in WordPress Plugin WP BASE Booking versions = 6.3.2...
WordPress eShipper Commerce plugin <= 2.16.13 - SQL Injection vulnerability
SQL Injection vulnerability discovered by hivesec in WordPress Plugin eShipper Commerce versions = 2.16.13...
WordPress Simple JWT Login plugin < 3.6.8 - Unauthenticated Account Takeover via Missing Google id_token Audience Validation vulnerability
Unauthenticated Account Takeover via Missing Google idtoken Audience Validation vulnerability discovered by Farid Narimanov in WordPress Plugin Simple JWT Login versions 3.6.8...
WordPress CatFolders Document Gallery plugin < 2.0.7 - Unauthenticated Attachment Disclosure via REST API vulnerability
Unauthenticated Attachment Disclosure via REST API vulnerability discovered by Shikhali Jamalzade in WordPress Plugin CatFolders Document Gallery & PDF Library versions 2.0.7...
WordPress Solace Extra plugin <= 1.6.0 - Missing Authorization to Unauthenticated Site Content Deletion and Unauthorized Demo Import via action-import-zip AJAX Action vulnerability
Missing Authorization to Unauthenticated Site Content Deletion and Unauthorized Demo Import via action-import-zip AJAX Action vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Solace Extra versions = 1.6.0...
WordPress Masteriyo LMS plugin < 2.3.3 - Instructor+ Stored XSS via Quiz Description vulnerability
Instructor+ Stored XSS via Quiz Description vulnerability discovered by Farid Narimanov in WordPress Plugin Masteriyo - LMS versions 2.3.3...
WordPress WP Directory Kit plugin < 1.5.7 - Admin+ SQL Injection via section Parameter vulnerability
Admin+ SQL Injection via section Parameter vulnerability discovered by Erwan LR WPScan in WordPress Plugin WP Directory Kit versions 1.5.7...
WordPress ProSolution WP Client plugin < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameter vulnerability
Unauthenticated Blind SQLi via 'jobID' Parameter vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin ProSolution WP Client versions 2.0.6...
WordPress Copy & Delete Posts plugin < 1.5.5 - Authenticated Arbitrary Post Deletion via Missing Object-Level Authorization vulnerability
Authenticated Arbitrary Post Deletion via Missing Object-Level Authorization vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Duplicate Post versions 1.5.5...
WordPress WP Data Access plugin < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass vulnerability
Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass vulnerability discovered by Farid Narimanov in WordPress Plugin WP Data Access versions 5.5.79...
WordPress Salon Booking System - Free Version plugin < 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering vulnerability
WordPress Salon Booking System - Free Version plugin 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Salon booking system versions 10.30.34...
WordPress Saitama Addon Pack plugin <= 1.0.8 - Contributor+ Stored XSS via Post Meta vulnerability
Contributor+ Stored XSS via Post Meta vulnerability discovered by testoun in WordPress Plugin Saitama Addon Pack versions = 1.0.8...
WordPress WP Custom HTML Pages plugin <= 0.6.2 - Author+ Stored XSS vulnerability
Author+ Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin WP Custom HTML Page versions = 0.6.2...
WordPress LogMyTrip plugin <= 1.9 - Unauthenticated SQL Injection via 'tid' Cookie vulnerability
Unauthenticated SQL Injection via 'tid' Cookie vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin LogMyTrip versions = 1.9...
WordPress Classified Listing plugin < 5.4.4 - Contributor+ Unpublished Post Content Disclosure via rtcl_block_css_get_posts vulnerability
Contributor+ Unpublished Post Content Disclosure via rtclblockcssgetposts vulnerability discovered by Huseyin Mertoglu in WordPress Plugin Classified Listing versions 5.4.4...
WordPress EPROLO Dropshipping plugin <= 2.4.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by hivesec in WordPress Plugin EPROLO Dropshipping versions = 2.4.2...