PT-2026-103714

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's before email success msg function whitelisting the client-submitted 'role' key and copying it into the...

PT-2026-97646

Name of the Vulnerable Software and Affected Versions Paytium: Mollie payment forms & donations plugin for WordPress versions prior to 5.0.4 Description A privilege escalation issue exists where unauthenticated attackers can register a new WordPress account with administrator privileges. The flaw...

PT-2019-7148

Name of the Vulnerable Software and Affected Versions WP Marketplace plugin version 2.4.0 Description The issue allows remote authenticated users to create arbitrary users and gain admin privileges. This is achieved through the ajaxinit function in wpmarketplace/libs/cart.php by sending a request...