WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dutafi in WordPress Plugin YITH WooCommerce Membership Premium versions = 2.33.0...

WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Nabil Irawan in WordPress Plugin PDF Smart Viewer for Elementor versions = 1.0.4...

WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Online Contact Widget versions = 1.3.0...

WordPress Duitku Payment Gateway plugin <= 2.11.14 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by daroo in WordPress Plugin Duitku Payment Gateway versions = 2.11.14...

WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Jakub Herman in WordPress Plugin Restaurant Menu by MotoPress versions = 2.4.11...

WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Evan NR in WordPress Plugin WPDM – Premium Packages versions = 7.0.5...

WordPress MultiVendorX plugin <= 5.0.14 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jakub Herman in WordPress Plugin MultiVendorX versions = 5.0.14...

WordPress Flutterwave WooCommerce plugin <= 3.3.0 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin Flutterwave WooCommerce versions = 3.3.0...

WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Jakub Herman in WordPress Plugin Booking calendar, Appointment Booking System versions = 3.2.36...

WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability

WordPress Masteriyo - LMS plugin = 2.3.2 - Arbitrary File Upload vulnerability discovered by 20kilograma in WordPress Plugin Masteriyo - LMS versions = 2.3.2...

WordPress Contact Form by Supsystic plugin < 1.10.0 - Bypass Vulnerability vulnerability

Bypass Vulnerability vulnerability discovered by Asim Alshaya in WordPress Plugin Contact Form by Supsystic versions 1.10.0...

WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Asim Alshaya in WordPress Plugin Contact Form by Supsystic versions 1.10.0...

WordPress Youzify plugin <= 1.3.7 - Deserialization of untrusted data vulnerability

Deserialization of untrusted data vulnerability discovered by Peter Thaleikis in WordPress Plugin Youzify versions = 1.3.7...

WordPress Ultimate Dashboard plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Ultimate Dashboard versions = 3.11.2...

WordPress Ultimate Dashboard Pro plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Ultimate Dashboard Pro versions = 3.11.2...

WordPress Gallery by BestWebSoft plugin <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys vulnerability

Authenticated Editor+ SQL Injection via Gallery Image Order Array Keys vulnerability discovered by Farrukh Ziyaev in WordPress Plugin Gallery versions = 4.7.9...

WordPress Bold Page Builder plugin <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Bold Page Builder versions = 5.6.8...

WordPress WP Compress plugin <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion vulnerability

Cross-Site Request Forgery to Arbitrary Options Deletion vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Compress versions = 7.10.09...

WordPress Video Gallery plugin <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode vulnerability

Authenticated Author+ Stored Cross-Site Scripting via Attachment 'posttitle' via emdmbmeta Shortcode vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin YouTube Showcase versions = 4.0.4...

WordPress Turnkey bbPress by WeaverTheme plugin <= 1.7.1 - Authenticated (Administrator+) PHP Object Injection vulnerability

Authenticated Administrator+ PHP Object Injection vulnerability discovered by Luk6785 in WordPress Plugin Turnkey bbPress versions = 1.7.1...