WordPress Dashboard Widget Sidebar plugin <= 1.2.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Mika in WordPress Plugin Dashboard Widget Sidebar versions = 1.2.3...

WordPress WP DataTable plugin <= 0.2.7 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin WP DataTable versions = 0.2.7...

WordPress Spreadconnect plugin <= 2.1.5 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by ch4r0n in WordPress Plugin Spreadconnect versions = 2.1.5...

WordPress PlatiOnline Payments plugin <= 7.0.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by norahc in WordPress Plugin PlatiOnline Payments versions = 7.0.0...

WordPress WPB Category Slider for WooCommerce plugin <= 1.71 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by muhammad yudha in WordPress Plugin WPB Category Slider for WooCommerce versions = 1.71...

WordPress Football Pool plugin <= 2.12.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Football Pool versions = 2.12.5...

WordPress Omnipress plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Yusuf in WordPress Plugin Omnipress versions = 1.6.4...

WordPress Leyka plugin <= 3.32 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Leyka versions = 3.32...

WordPress Import external attachments plugin <= 1.5.12 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Import external attachments versions = 1.5.12...

WordPress Hide Admin Bar From Front End plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Hide Admin Bar From Front End versions = 1.0.0...

WordPress Writesonic plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Writesonic versions = 1.0.5...

WordPress HurryTimer plugin <= 2.13.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by ch4r0n in WordPress Plugin HurryTimer versions = 2.13.1...

WordPress Cyrlitera plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Cyrlitera versions = 1.3.0...

WordPress WP Edit plugin <= 4.0.4 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin WP Edit versions = 4.0.4...

WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.148 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WooCommerce PDF Invoice Builder versions = 1.2.148...

WordPress Burst Statistics plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Burst Statistics versions = 2.0.6...

CVE-2025-53323 WordPress Pre-Publish Post Checklist plugin <= 3.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in danbriapps Pre-Publish Post Checklist pre-publish-post-checklist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pre-Publish Post Checklist: from n/a through = 3.1...

CVE-2025-53318

CVE-2025-53318 (WP DB Booster) : A Missing Authorization vulnerability in the WordPress plugin WP DB Booster (affected versions: from n/a through 1.0.1) allows exploitation of incorrectly configured access control security levels. Connected sources consistently identify it as a missing/weak autho...

CVE-2025-53309

CVE-2025-53309 refers to a vulnerability in the WordPress plugin Accept Stripe Payments Using Contact Form 7 (versions 3.0 and earlier). The issue is described as Insertion of Sensitive Information Into Sent Data, enabling retrieval of embedded sensitive data. Public sources in the provided docum...

CVE-2025-53304 WordPress Contact Form – 7 : Hide Success Message plugin <= 1.1.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Rohil Contact Form – 7 : Hide Success Message contact-form-7-hide-success-message allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Contact Form – 7 : Hide Success Message: from n/a through = 1.1.4...