100164 matches found
WordPress Geotargeting WP plugin < 3.5.6.2 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by andrew gomez in WordPress Plugin Geotargeting WP versions 3.5.6.2...
WordPress Frontend Admin by DynamiApps plugin < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion vulnerability
Subscriber+ Arbitrary Membership Plan Deletion vulnerability discovered by Sai Praneeth Koti in WordPress Plugin Frontend Admin by DynamiApps versions 3.29.11...
WordPress Groundhogg — CRM, Newsletters, and Marketing Automation plugin < 4.5.13 - Unauthenticated Stored XSS vulnerability
Unauthenticated Stored XSS vulnerability discovered by Artus KG in WordPress Plugin Groundhogg versions 4.5.13...
WordPress Rest Routes plugin <= 5.5.5 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Rest Routes – Custom Endpoints for WP REST API versions = 5.5.5...
WordPress 爱采集数据采集和发布插件 plugin <= 1.0.0 - Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write vulnerability
Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin 爱采集数据采集和发布插件 versions = 1.0.0...
WordPress Uix UserCenter plugin <= 1.0.3 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by moonge in WordPress Plugin Uix UserCenter versions = 1.0.3...
WordPress MyHome Core plugin <= 4.4.5 - Authentication Bypass to Account Takeover vulnerability
Authentication Bypass to Account Takeover vulnerability discovered by Rafie Muhammad in WordPress Plugin MyHome Core versions = 4.4.5...
WordPress Custom User Registration Fields for WooCommerce plugin <= 2.2.3 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Custom User Registration Fields for WooCommerce versions = 2.2.3...
WordPress bbPress plugin <= 2.6.14 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin bbPress versions = 2.6.14...
WordPress SigmaForms Pro – AI Generated Forms plugin <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution vulnerability
Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution vulnerability discovered by d.v4ns3c in WordPress Plugin SigmaForms Pro – AI Generated Forms versions = 1.4.5...
WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Gabriel Tanaka in WordPress Plugin RegistrationMagic versions = 6.0.9.8...
WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Kalles Addons versions = 1.0.6...
WordPress Really Simple Security plugin < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation vulnerability
Multisite Subsite Admin+ Arbitrary Plugin Installation vulnerability discovered by Charles Vosburgh in WordPress Plugin Really Simple SSL versions 9.8.0...
WordPress HEL Online Classroom: AI-powered Online Classrooms plugin <= 1.0.3 - Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass vulnerability
Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass vulnerability discovered by kimsunghoon in WordPress Plugin HEL Online Classroom: AI-powered Online Classrooms versions = 1.0.3...
WordPress MStore API plugin < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass vulnerability
Subscriber+ Arbitrary Order Payment Bypass vulnerability discovered by Erwan LR WPScan in WordPress Plugin MStore API versions 4.21.1...
WordPress MapSVG plugin <= 8.15.0 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Adam Kahlon Adkali in WordPress Plugin MapSVG versions = 8.15.0...
CVE-2026-77013
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not restrict which of its handler methods a request may invoke, and performs no capability or nonce check on them, allowing unauthenticated users to create WordPress user accounts and taxonomy terms...
CVE-2026-77013 Icollect <= 1.0.0 - Unauthenticated User and Term Creation via Unrestricted Method Dispatch
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not restrict which of its handler methods a request may invoke, and performs no capability or nonce check on them, allowing unauthenticated users to create WordPress user accounts and taxonomy terms...
CVE-2026-77013 Icollect <= 1.0.0 - Unauthenticated User and Term Creation via Unrestricted Method Dispatch
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not restrict which of its handler methods a request may invoke, and performs no capability or nonce check on them, allowing unauthenticated users to create WordPress user accounts and taxonomy terms...
