WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Asim Alshaya in WordPress Plugin Contact Form by Supsystic versions 1.10.0...

WordPress Youzify plugin <= 1.3.7 - Deserialization of untrusted data vulnerability

Deserialization of untrusted data vulnerability discovered by Peter Thaleikis in WordPress Plugin Youzify versions = 1.3.7...

WordPress Ultimate Dashboard Pro plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Ultimate Dashboard Pro versions = 3.11.2...

WordPress Ultimate Dashboard plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Ultimate Dashboard versions = 3.11.2...

WordPress Gallery by BestWebSoft plugin <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys vulnerability

Authenticated Editor+ SQL Injection via Gallery Image Order Array Keys vulnerability discovered by Farrukh Ziyaev in WordPress Plugin Gallery versions = 4.7.9...

WordPress Bold Page Builder plugin <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Bold Page Builder versions = 5.6.8...

WordPress WP Compress plugin <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion vulnerability

Cross-Site Request Forgery to Arbitrary Options Deletion vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Compress versions = 7.10.09...

WordPress Video Gallery plugin <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode vulnerability

Authenticated Author+ Stored Cross-Site Scripting via Attachment 'posttitle' via emdmbmeta Shortcode vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin YouTube Showcase versions = 4.0.4...

WordPress Turnkey bbPress by WeaverTheme plugin <= 1.7.1 - Authenticated (Administrator+) PHP Object Injection vulnerability

Authenticated Administrator+ PHP Object Injection vulnerability discovered by Luk6785 in WordPress Plugin Turnkey bbPress versions = 1.7.1...

WordPress SureDash plugin <= 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin SureDash versions = 1.10.3...

WordPress Smash Balloon Social Post Feed plugin <= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Smash Balloon Social Post Feed versions = 4.9.0...

WordPress Serious Slider plugin <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'theme' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'theme' Shortcode Attribute vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Serious Slider versions = 1.4.0...

WordPress Slider Hero with Video Background, Animation plugin <= 9.1.7 - Authenticated (Administrator+) SQL Injection via 'description' Slide Field (Second-Order via Duplicate) vulnerability

Authenticated Administrator+ SQL Injection via 'description' Slide Field Second-Order via Duplicate vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Slider Hero versions = 9.1.7...

WordPress ShortPixel Adaptive Images plugin <= 3.11.5 - Missing Authorization to Authenticated (Subscriber+) Third-Party Plugin Option Modification via 'causer' Parameter vulnerability

Missing Authorization to Authenticated Subscriber+ Third-Party Plugin Option Modification via 'causer' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin ShortPixel Adaptive Images versions = 3.11.5...

WordPress MWB HubSpot for WooCommerce plugin <= 1.6.7 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin MWB HubSpot for WooCommerce versions = 1.6.7...

WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 20kilograma in WordPress Plugin Affiliates Manager versions = 2.9.53...

WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by dutafi in WordPress Plugin RegistrationMagic versions = 6.0.9.7...

WordPress Popup by Supsystic plugin <= 1.13.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Asim Alshaya in WordPress Plugin Popup by Supsystic versions = 1.13.0...

WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Asim Alshaya in WordPress Plugin Ultimate Maps by Supsystic versions 1.5.0...

WordPress URL Shortify plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin URL Shortify versions = 2.5.0...