6503 matches found
CVE-2025-31561 WordPress Ultimate Push Notifications plugin <= 1.2.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CodeSolz Ultimate Push Notifications ultimate-push-notifications allows SQL Injection.This issue affects Ultimate Push Notifications: from n/a through = 1.2.0...
CVE-2025-31454 WordPress Delete Post Revision plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arefly Delete Post Revision delete-post-revision allows Reflected XSS.This issue affects Delete Post Revision: from n/a through = 1.1...
CVE-2025-30825 WordPress WPC Smart Linked Products plugin <= 1.3.5 - Privilege Escalation vulnerability
Missing Authorization vulnerability in WPClever WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce wpc-smart-linked-products allows Privilege Escalation.This issue affects WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce: from n/a through = 1.3.5...
CVE-2025-30844
CVE-2025-30844 – Watu Quiz (WordPress) : The connected vulnerability record for Watu Quiz reports a reflected Cross-Site Scripting flaw caused by improper input neutralization during web page generation, affecting Watu Quiz versions from n/a through 3.4.2. The Wordfence entry confirms this CVE wi...
WordPress User Registration & Membership Pro plugin < 5.1.3 - Authentication Bypass vulnerability
Authentication Bypass vulnerability discovered by wesley wcraft in WordPress Plugin User Registration & Membership Pro versions 5.1.3...
WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update vulnerability
Missing Authorization to Authenticated Subscriber+ Limited Options Update vulnerability discovered by kr0d in WordPress Plugin Insert Headers and Footers Code – HT Script versions = 1.1.2...
WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation vulnerability
Unauthenticated Account Takeover/Privilege Escalation vulnerability discovered by Lucio Sá in WordPress Plugin SMS Alert Order Notifications versions = 3.7.9...
WordPress Limit Max IPs Per User plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin Limit Max IPs Per User versions = 1.5...
WordPress News & Blog Designer Pack plugin <= 4.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin News & Blog Designer Pack versions = 4.0...
WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Enable Media Replace versions = 4.1.5...
WordPress JSON Structuring Markup plugin <= 0.1 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin JSON Structuring Markup versions = 0.1...
WordPress WP Profitshare Plugin <= 1.4.9 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin WP Profitshare versions = 1.4.9...
WordPress Barcode Generator for WooCommerce plugin <= 2.0.4 - Settings Change vulnerability
Settings Change vulnerability discovered by Mika in WordPress Plugin Barcode Generator for WooCommerce versions = 2.0.4...
WordPress WP AutoKeyword plugin <= 1.0 - Arbitrary Content Deletion vulnerability
Arbitrary Content Deletion vulnerability discovered by Mika in WordPress Plugin WP AutoKeyword versions = 1.0...
WordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Tran Hoang Tuan Kiet in WordPress Plugin JS Job Manager versions = 2.0.2...
WordPress CartBoss plugin <= 4.1.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin CartBoss versions = 4.1.2...
WordPress WP AdCenter plugin <= 2.5.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin WP AdCenter versions = 2.5.8...
WordPress Feedbucket – Website Feedback Tool Plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Feedbucket – Website Feedback Tool versions = 1.0.6...
WordPress PDF Generator Addon for Elementor Page Builder plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin PDF Generator Addon for Elementor Page Builder versions = 2.1.0...