WordPress Contest Gallery plugin < 30.0.7 - Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_prompts vulnerability

Subscriber+ OpenAI Prompt History Disclosure via postcggetopenaiprompts vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin Contest Gallery versions 30.0.7...

WordPress Query Wrangler plugin <= 1.5.57 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by hhhai in WordPress Plugin Query Wrangler versions = 1.5.57...

WordPress WP w3all phpBB plugin <= 3.0.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Khanh Nguyen in WordPress Plugin WP w3all phpBB versions = 3.0.5...

WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Taylsec in WordPress Plugin FundEngine versions = 1.7.9...

WordPress Easy Dropbox Integration plugin < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX vulnerability

Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Easy Integration for Dropbox versions 2.2.0...

WordPress miniOrange 2FA plugin < 6.2.7 - Subscriber+ Arbitrary-Recipient OTP Send vulnerability

Subscriber+ Arbitrary-Recipient OTP Send vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin miniOrange's Google Authenticator versions 6.2.7...

WordPress Meow Gallery plugin < 5.5.2 - Author+ Stored XSS via Attachment Alt-Text vulnerability

Author+ Stored XSS via Attachment Alt-Text vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Meow Gallery versions 5.5.2...

WordPress Leyka plugin <= 3.32.3 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin Leyka versions = 3.32.3...

WordPress SmartSMTP plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jorgson in WordPress Plugin SmartSMTP versions = 1.2.0...

WordPress BNE Testimonials plugin < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode vulnerability

Contributor+ Stored XSS via Slider Shortcode vulnerability discovered by testoun in WordPress Plugin BNE Testimonials versions 2.0.8.2...

WordPress HUSKY - Products Filter Professional for WooCommerce plugin < 1.4.1 - Shop Manager+ Local File Inclusion via meta_filter search_view vulnerability

WordPress HUSKY - Products Filter Professional for WooCommerce plugin 1.4.1 - Shop Manager+ Local File Inclusion via metafilter searchview vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin HUSKY versions 1.4.1...

WordPress Nested Pages plugin < 3.2.15 - Editor+ Stored XSS via Post Title vulnerability

Editor+ Stored XSS via Post Title vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin Nested Pages versions 3.2.15...

WordPress s2Member plugin < 260805 - Contributor+ Stored XSS via Shortcode vulnerability

Contributor+ Stored XSS via Shortcode vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin s2Member versions 260805...

WordPress Quiz And Survey Master plugin < 11.2.2 - Contributor+ Stored XSS via Polar Question vulnerability

Contributor+ Stored XSS via Polar Question vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin Quiz And Survey Master versions 11.2.2...

WordPress Podlove Podcast Publisher plugin <= 4.5.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Podlove Podcast Publisher versions = 4.5.4...

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Aydan Arabadzha in WordPress Plugin rtMedia for WordPress, BuddyPress and bbPress versions = 4.7.11...

WordPress Paymob for WooCommerce plugin <= 4.1.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Paymob for WooCommerce versions = 4.1.10...

WordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Golo Framework versions 1.7.5...

WordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Swatchly – WooCommerce Variation Swatches for Products versions = 1.4.13...

WordPress WordPress Persistent Login plugin <= 3.1.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dutafi in WordPress Plugin WordPress Persistent Login versions = 3.1.0...