WordPress Student Result or Employee Database plugin <= 1.7.9 - Unauthorized REST Calls vulnerability

Unauthorized REST Calls vulnerability discovered by WPScanTeam in WordPress Student Result or Employee Database plugin versions = 1.7.9. Solution Update the WordPress Student Result or Employee Database plugin to the latest available version at least 1.8.0...

WordPress Name Directory plugin <= 1.25.4 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Stored Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability discovered by WPScanTeam in WordPress Name Directory plugin versions = 1.25.4. Solution Update the WordPress Name Directory plugin to the latest available version at least 1.25.5...

WordPress WPDating plugin <= 7.1.9 - Multiple SQL Injection (SQLi) vulnerabilities

Multiple SQL Injection SQLi vulnerabilities discovered by WPScanTeam in WordPress WPDating plugin versions = 7.1.9. Solution No patched version available...

WordPress WP Video Lightbox plugin <= 1.9.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress WP Video Lightbox plugin versions = 1.9.5. Solution Update the WordPress WP Video Lightbox plugin to the latest available version at least 1.9.6...

WordPress Ivory Search plugin <= 5.4.6 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Ivory Search plugin versions = 5.4.6. Solution Update the WordPress Ivory Search plugin to the latest available version at least 5.4.7...

WordPress NextScripts: Social Networks Auto-Poster plugin <= 4.3.25 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress NextScripts: Social Networks Auto-Poster plugin versions = 4.3.25. Solution Update the WordPress NextScripts plugin to the latest available version at least 4.3.26...

WordPress Name Directory plugin <= 1.25.3 - Arbitrary Directory/Name Deletion via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Directory/Name Deletion via Cross-Site Request Forgery CSRF vulnerability discovered by WPScanTeam in the WordPress Name Directory plugin versions = 1.25.3. Solution Update the WordPress Name Directory plugin to the latest available version at least 1.25.4...

WordPress Page Generator plugin <= 1.6.5 - Arbitrary Keywords Deletion/Duplication via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Keywords Deletion/Duplication via Cross-Site Request Forgery CSRF vulnerability discovered by WPScanTeam in WordPress Page Generator plugin versions = 1.6.5. Solution Update the WordPress Page Generator plugin to the latest available version at least 1.6.6...

WordPress miniOrange's Google Authenticator plugin <= 5.5.7 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress miniOrange's Google Authenticator plugin versions = 5.5.7. Solution Update the WordPress miniOrange's Google Authenticator plugin to the latest available version at least 5.5.75...

WordPress LearnPress plugin <= 4.1.6.6 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress LearnPress plugin versions = 4.1.6.6. Solution Update the WordPress LearnPress plugin to the latest available version at least 4.1.6.7...

WordPress Real Cookie Banner plugin <= 2.18.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Real Cookie Banner plugin versions = 2.18.1. Solution Update the WordPress Real Cookie Banner plugin to the latest available version at least 2.18.2...

WordPress Clearfy Cache plugin <= 2.0.4 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Clearfy Cache plugin versions = 2.0.4. Solution Update the WordPress Clearfy Cache plugin to the latest available version at least 2.0.5...

WordPress Easy Testimonials plugin <= 3.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Easy Testimonials plugin versions = 3.8. Solution Update the WordPress Easy Testimonials plugin to the latest available version at least 3.9...

WordPress Flexible Shipping plugin <= 4.11.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Flexible Shipping plugin versions = 4.11.8. Solution Update the WordPress Flexible Shipping plugin to the latest available version at least 4.11.9...

WordPress ShortPixel Image Optimizer plugin <= 4.22.9 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress ShortPixel Image Optimizer plugin versions = 4.22.9. Solution Update the WordPress ShortPixel Image Optimizer plugin to the latest available version at least 4.22.10...

WordPress Grow Social plugin <= 1.18.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Grow Social plugin versions = 1.18.2. Solution Update the WordPress Grow Social plugin to the latest available version at least 1.19.0...

WordPress Spectra plugin <= 1.25.5 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Spectra plugin versions = 1.25.5. Solution Update the WordPress Spectra plugin to the latest available version at least 1.25.6...

WordPress New User Approve plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress New User Approve plugin versions = 2.4. Solution Update the WordPress New User Approve plugin to the latest available version at least 2.4.1...

WordPress Gravity PDF plugin <= 6.3.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Gravity PDF plugin versions = 6.3.0. Solution Update the WordPress Gravity PDF plugin to the latest available version at least 6.3.1...

WordPress Modula Image Gallery plugin <= 2.6.6 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Modula Image Gallery plugin versions = 2.6.6. Solution Update the WordPress Modula Image Gallery plugin to the latest available version at least 2.6.7...