WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Broadcast Live Video versions = 7.3.6...

WordPress paymendo plugin <= 1.1 - Subscriber+ SQLi vulnerability

Subscriber+ SQLi vulnerability discovered by Erwan LR WPScan in WordPress Plugin paymendo versions = 1.1...

WordPress paymendo plugin <= 1.1 - Unauthenticated Blind SQLi vulnerability

Unauthenticated Blind SQLi vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin paymendo versions = 1.1...

WordPress Post Voting System plugin <= 1.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Post Voting System versions = 1.0...

WordPress Loja Automática plugin <= 1.0.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Loja Automática versions = 1.0.0...

WordPress ASPL Product Quotation plugin <= 1.1.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin ASPL Product Quotation versions = 1.1.0...

WordPress Llavero.io plugin <= 0.1.4 - Unauthenticated Blind SQLi vulnerability

Unauthenticated Blind SQLi vulnerability discovered by RIA Labs in WordPress Plugin Llavero.io versions = 0.1.4...

WordPress Social Web Suite plugin <= 4.1.12 - Unauthenticated Blind SQLi vulnerability

Unauthenticated Blind SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Social Web Suite versions = 4.1.12...

WordPress Topcontent plugin <= 1.2.1 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Topcontent versions = 1.2.1...

WordPress Site Setup Wizard plugin <= 1.5.8 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin Site Setup Wizard versions = 1.5.8...

WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by cazy in WordPress Plugin Paid Videochat Turnkey Site versions = 7.5.13...

CVE-2024-28000

LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000 🎤 README Translation English فارسی 📸 Screenshot 💎 Introduction This repository contains a Proof of Concept PoC for a critical privilege escalation vulnerability discovered in the LiteSpeed Cache WordPress plugin. The vulnerability,...

Exploit for CVE-2026-85097

CVE-2026-85097 - Bricksforge Word...

WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by myhappyhoon in WordPress Plugin Booktics versions = 1.0.28...

WordPress Link Whisper – Free SQL Injection Vulnerability

WordPress Link Whisper Free 0.9.7 and earlier versions have a SQL injection vulnerability. This vulnerability stems from improper handling of special elements in SQL commands, which may lead to blind SQL injections...

WordPress PowerPack Addons for Elementor: Cross-site Script Vulnerabilities

WordPress PowerPack Addons for Elementor 3.1.0 and earlier versions contain a cross-site scripting vulnerability. This vulnerability arises from improper input during web page generation, and could lead to storage-based cross-site scripting attacks...

WordPress IMPress for IDX Broker cross-site scripting vulnerability

WordPress IMPress for IDX Broker 3.3.1 and earlier versions have a cross-site scripting vulnerability. This vulnerability arises from improper input validation during web page generation, which may lead to storage-based cross-site scripting attacks...

WordPress Amelia authorization issue vulnerability

WordPress Amelia versions 2.4.10 and earlier have a vulnerability related to authorization. This vulnerability arises due to a lack of authorization, which may lead to the exploitation of incorrectly configured access control levels...

WordPress Pay for Payment for WooCommerce authorization issue vulnerability

WordPress Pay for Payment in WooCommerce 3.0.1 and earlier versions has an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control levels...

WordPress FluentBoards authorization issue vulnerability

WordPress FluentBoards versions 2.1.0 and earlier have a licensing issue vulnerability. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...