322744 matches found
CVE-2026-108476 WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13...
WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Broadcast Live Video versions = 7.3.6...
WordPress paymendo plugin <= 1.1 - Subscriber+ SQLi vulnerability
Subscriber+ SQLi vulnerability discovered by Erwan LR WPScan in WordPress Plugin paymendo versions = 1.1...
WordPress paymendo plugin <= 1.1 - Unauthenticated Blind SQLi vulnerability
Unauthenticated Blind SQLi vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin paymendo versions = 1.1...
WordPress Post Voting System plugin <= 1.0 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Post Voting System versions = 1.0...
WordPress Loja Automática plugin <= 1.0.0 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Loja Automática versions = 1.0.0...
WordPress ASPL Product Quotation plugin <= 1.1.0 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin ASPL Product Quotation versions = 1.1.0...
WordPress Llavero.io plugin <= 0.1.4 - Unauthenticated Blind SQLi vulnerability
Unauthenticated Blind SQLi vulnerability discovered by RIA Labs in WordPress Plugin Llavero.io versions = 0.1.4...
WordPress Social Web Suite plugin <= 4.1.12 - Unauthenticated Blind SQLi vulnerability
Unauthenticated Blind SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Social Web Suite versions = 4.1.12...
WordPress Topcontent plugin <= 1.2.1 - Unauthenticated Stored XSS vulnerability
Unauthenticated Stored XSS vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Topcontent versions = 1.2.1...
WordPress Site Setup Wizard plugin <= 1.5.8 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin Site Setup Wizard versions = 1.5.8...
WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by cazy in WordPress Plugin Paid Videochat Turnkey Site versions = 7.5.13...
CVE-2024-28000
LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000 🎤 README Translation English فارسی 📸 Screenshot 💎 Introduction This repository contains a Proof of Concept PoC for a critical privilege escalation vulnerability discovered in the LiteSpeed Cache WordPress plugin. The vulnerability,...
Exploit for CVE-2026-85097
CVE-2026-85097 - Bricksforge Word...
WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by myhappyhoon in WordPress Plugin Booktics versions = 1.0.28...
WordPress Link Whisper – Free SQL Injection Vulnerability
WordPress Link Whisper Free 0.9.7 and earlier versions have a SQL injection vulnerability. This vulnerability stems from improper handling of special elements in SQL commands, which may lead to blind SQL injections...
WordPress PowerPack Addons for Elementor: Cross-site Script Vulnerabilities
WordPress PowerPack Addons for Elementor 3.1.0 and earlier versions contain a cross-site scripting vulnerability. This vulnerability arises from improper input during web page generation, and could lead to storage-based cross-site scripting attacks...
WordPress Amelia authorization issue vulnerability
WordPress Amelia versions 2.4.10 and earlier have a vulnerability related to authorization. This vulnerability arises due to a lack of authorization, which may lead to the exploitation of incorrectly configured access control levels...
WordPress IMPress for IDX Broker cross-site scripting vulnerability
WordPress IMPress for IDX Broker 3.3.1 and earlier versions have a cross-site scripting vulnerability. This vulnerability arises from improper input validation during web page generation, which may lead to storage-based cross-site scripting attacks...
WordPress Ad Inserter has a vulnerability related to information leakage
WordPress Ad Inserter 2.8.18 and earlier versions have a vulnerability involving information leakage. This vulnerability stems from the aiwpfooterhook, which exposes sensitive information. It is possible for authenticated attackers with privileges at the subscriber level or higher to extract...