Lucene search
+L
PatchstackMost viewed

47982 matches found

Patchstack
Patchstack
added 2022/09/02 12:0 a.m.26 views

WordPress History Timeline plugin <= 1.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress History Timeline plugin versions = 1.0.5. Solution Deactivate and delete. No reply from the vendor...

5.4CVSS2.3AI score0.00464EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2022/09/01 12:0 a.m.26 views

WordPress Word Search Puzzles game plugin <= 2.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress Word Search Puzzles game plugin versions = 2.0.1. Solution Deactivate and delete. No reply from the vendor...

4.8CVSS2.7AI score0.00454EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2022/08/31 12:0 a.m.26 views

WordPress WP Shop plugin <= 3.9.6 - Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities

Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities were discovered by ptsfence Patchstack Alliance in the WordPress WP Shop plugin versions = 3.9.6. Solution Deactivate and delete. No reply from the vendor...

9.1CVSS3.6AI score0.00749EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2022/08/29 12:0 a.m.26 views

WordPress Ultimate SMS Notifications for WooCommerce plugin <= 1.4.1 - CSV Injection vulnerability

CSV Injection vulnerability discovered by Zhouyuan Yang in WordPress Ultimate SMS Notifications for WooCommerce plugin versions = 1.4.1. Solution Update the WordPress Ultimate SMS Notifications for WooCommerce plugin to the latest available version at least 1.4.2...

8CVSS3.4AI score0.00693EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2022/08/25 12:0 a.m.26 views

WordPress Accommodation System plugin <= 1.0.1 - Missing Access Control vulnerability

Missing Access Control vulnerability discovered by ptsfence Patchstack Alliance in WordPress Accommodation System plugin versions = 1.0.1. Solution Deactivate and delete. This plugin has been closed as of August 24, 2022 and is not available for download. This closure is temporary, pending a full...

9.8CVSS4.7AI score0.00736EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2022/08/10 12:0 a.m.26 views

WordPress Best Payments Plugin for WP plugin <= 4.2.0 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered by Rafshanzani Suhada in WordPress Best Payments Plugin for WP plugin versions = 4.2.0. Solution Update the WordPress Best Payments Plugin for WP plugin to the latest available version at least 4.2.1...

7.2CVSS1.8AI score0.0059EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/08/08 12:0 a.m.26 views

WordPress JoomSport plugin <= 5.2.5 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Salim Al-Wahaibi in WordPress JoomSport plugin versions = 5.2.5. Solution Update the WordPress JoomSport plugin to the latest available version at least 5.2.6...

7.2CVSS2.8AI score0.01172EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2022/08/04 12:0 a.m.26 views

WordPress Sensei LMS plugin <= 4.5.1 - Arbitrary Private Message Sending via IDOR vulnerability

Arbitrary Private Message Sending via IDOR vulnerability discovered by Veshraj Ghimire in WordPress Sensei LMS plugin versions = 4.5.1. Solution Update the WordPress Sensei LMS plugin to the latest available version at least 4.5.2...

4.3CVSS3.7AI score0.00668EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/07/29 12:0 a.m.26 views

WordPress Floating Div plugin <= 3.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress Floating Div plugin versions = 3.0. Solution No patched version available...

4.8CVSS2.8AI score0.0055EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2022/07/26 12:0 a.m.26 views

WordPress Feed Them Social plugin <= 2.9.9 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by dc11 in WordPress Feed Them Social plugin versions = 2.9.9. Solution Update the WordPress Feed Them Social plugin to the latest available version at least 3.0.1...

6.1CVSS2.5AI score0.05149EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/07/23 12:0 a.m.26 views

WordPress TranslatePress plugin <= 2.3.2 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Elias Hohl in WordPress TranslatePress plugin versions = 2.3.2. Solution Update the WordPress TranslatePress plugin to the latest available version at least 2.3.3...

8.8CVSS2.9AI score0.0408EPSS
SaveExploits5References1Affected Software1
Patchstack
Patchstack
added 2022/07/19 12:0 a.m.26 views

WordPress Easy Student Results plugin <= 2.2.8 - Sensitive Information Disclosure via REST API vulnerability

Sensitive Information Disclosure via REST API vulnerability discovered by Raad Haddad in WordPress Easy Student Results plugin versions = 2.2.8. Solution Deactivate and delete. This plugin has been closed as of July 11, 2022 and is not available for download. This closure is temporary, pending a...

7.5CVSS1.8AI score0.029EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/07/18 12:0 a.m.26 views

WordPress DW Promobar plugin <= 1.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Vinay Varma Mudunuri, Krishna Harsha Kondaveeti in WordPress DW Promobar plugin versions = 1.0.4. Solution Deactivate and delete. This plugin has been closed as of July 15, 2022 and is not available for download. This closu...

4.8CVSS1.1AI score0.00511EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/07/18 12:0 a.m.26 views

WordPress Auto More Tag plugin <= 4.0.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Vinay Varma Mudunuri, Krishna Harsha Kondaveeti in WordPress Auto More Tag plugin versions = 4.0.0. Solution Deactivate and delete. This plugin has been closed as of July 14, 2022 and is not available for download. This...

4.8CVSS1.3AI score0.00511EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2022/07/18 12:0 a.m.26 views

WordPress YaySMTP plugin <= 2.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Rafshanzani Suhada in WordPress YaySMTP plugin versions = 2.2. Solution Update the WordPress YaySMTP plugin to the latest available version at least 2.2.1...

5.4CVSS1.9AI score0.00512EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/07/11 12:0 a.m.26 views

WordPress YOP Poll plugin <= 6.4.2 - IP Spoofing vulnerability

IP Spoofing vulnerability discovered by Daniel Ruf in WordPress YOP Poll plugin versions = 6.4.2. Solution Update the WordPress YOP Poll plugin to the latest available version at least 6.4.3...

5.3CVSS2AI score0.00739EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2022/07/07 12:0 a.m.26 views

WordPress Microsoft Advertising Universal Event Tracking (UET) plugin <= 1.0.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Chowdhury Faizal Ahammed in WordPress Microsoft Advertising Universal Event Tracking UET plugin versions = 1.0.3. Solution Update the WordPress Microsoft Advertising Universal Event Tracking UET plugin to the latest availab...

4.8CVSS2.2AI score0.01326EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/06/30 12:0 a.m.26 views

WordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerability

Unauthenticated Arbitrary Option Update vulnerability discovered by m0ze Patchstack in WordPress Shortcode Addons plugin versions = 3.0.2. Solution Update the WordPress Shortcode Addons plugin to the latest available version at least 3.0.3...

9.8CVSS3.4AI score0.03225EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2022/06/27 12:0 a.m.26 views

WordPress Download Monitor plugin <= 4.5.9 - Authenticated Arbitrary File Download vulnerability

Authenticated Arbitrary File Download vulnerability discovered by Thiago Martins, Jorge Buzeti, Leandro Inacio, Lucas de Souza, Matheus Oliveira, Filipe Baptistella, Leonardo Paiva, Jose Thomaz, Joao Maciel, Vinicius Pereira, Geovanni Campos, Hudson Nowak, Guilherme Acerbi in WordPress Download...

4.9CVSS2.7AI score0.01088EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/06/27 12:0 a.m.26 views

WordPress Discount Rules for WooCommerce plugin <= 2.4.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by ZhongFu Su aka JrXnm WuHan University in WordPress Discount Rules for WooCommerce plugin versions = 2.4.1. Solution Update the WordPress Discount Rules for WooCommerce plugin to the latest available version at least 2.4.2...

6.1CVSS2.5AI score0.00757EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/06/21 12:0 a.m.26 views

WordPress Brizy Page Builder plugin <= 2.4.1 - Authenticated Stored Cross-Site Scripting (XSS) via Element Content

Authenticated Stored Cross-Site Scripting XSS via Element Content discovered by Vishnupriya Ilango in WordPress Brizy Page Builder plugin versions = 2.4.1. Solution Update the WordPress Brizy – Page Builder plugin to the latest available version at least 2.4.2...

5.4CVSS2.7AI score0.00648EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/06/21 12:0 a.m.26 views

WordPress Best Contact Management Software plugin <= 3.7.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Benachi in WordPress Best Contact Management Software plugin versions = 3.7.3. Solution Deactivate and delete. This plugin has been closed as of June 21, 2022 and is not available for download. This closure is temporary,...

4.8CVSS2.3AI score0.00565EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/06/17 12:0 a.m.26 views

WordPress GiveWP plugin <= 2.20.2 - Donor Information Disclosure vulnerability

Donor Information Disclosure vulnerability discovered by Kane Gamble Blackfoot UK in WordPress GiveWP plugin versions = 2.20.2. Solution Update the WordPress GiveWP plugin to the latest available version at least 2.21.0...

5.3CVSS1.9AI score0.01106EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2022/06/13 12:0 a.m.26 views

WordPress wp-championship plugin <= 9.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities were discovered by Daniel Ruf in the WordPress wp-championship plugin versions = 9.2. Solution Update the WordPress WP Championship plugin to the latest available version at least 9.3...

6.5CVSS2.4AI score0.00502EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/06/10 12:0 a.m.26 views

WordPress Ninja Forms plugin <= 3.6.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Muhammad Adel in WordPress Ninja Forms plugin versions = 3.6.9. Solution Update the WordPress Ninja Forms plugin to the latest available version at least 3.6.10...

4.8CVSS2.1AI score0.00565EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/06/06 12:0 a.m.26 views

WordPress Product Configurator for WooCommerce plugin <= 1.2.31 - Unauthenticated Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion vulnerability discovered by cydave in WordPress Product Configurator for WooCommerce plugin versions = 1.2.31. Solution Update the WordPress Product Configurator for WooCommerce plugin to the latest available version at least 1.2.32...

9.1CVSS3.6AI score0.01702EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2022/05/30 12:0 a.m.26 views

WordPress Allow svg files plugin <= 1.0 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability discovered by Luan Pedersini in WordPress Allow svg files plugin versions = 1.0. Solution Update the WordPress Allow svg files plugin to the latest available version at least 1.1...

7.2CVSS3.4AI score0.01436EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2022/05/26 12:0 a.m.26 views

WordPress Mail Subscribe List plugin <= 2.1.3 - Arbitrary Subscribed User Deletion via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Subscribed User Deletion via Cross-Site Request Forgery CSRF vulnerability was discovered by Daniel Ruf in the WordPress Mail Subscribe List plugin versions = 2.1.3. Solution Update the WordPress Mail Subscribe List plugin to the latest available version at least 2.1.4...

4.3CVSS3.6AI score0.00412EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/05/26 12:0 a.m.26 views

WordPress Travel Management plugin <= 2.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Ngo Van Thien Patchstack Alliance in the WordPress Travel Management plugin versions = 2.0. Solution Deactivate and delete. This plugin has been closed as of May 6, 2022 and is not available for download. Th...

5.4CVSS1.7AI score0.00633EPSS
SaveExploits1References2Affected Software1
Patchstack
Patchstack
added 2022/05/26 12:0 a.m.26 views

WordPress Promotion Slider plugin <= 3.3.4 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Ngo Van Thien Patchstack Alliance in the WordPress Promotion Slider plugin versions = 3.3.4. Solution Deactivate and delete. This plugin has been closed as of May 20, 2022 and is not available for download...

5.4CVSS2.3AI score0.00524EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/05/23 12:0 a.m.26 views

WordPress Like Button Rating LikeBtn plugin <= 2.6.44 - Arbitrary e-mail Sending vulnerability

Arbitrary e-mail Sending vulnerability discovered by Krzysztof Zając in WordPress Like Button Rating LikeBtn plugin versions = 2.6.44. Solution Update the WordPress Like Button Rating LikeBtn plugin to the latest available version at least 2.6.45...

6.5CVSS3.3AI score0.0077EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2022/05/23 12:0 a.m.26 views

WordPress Zephyr Project Manager plugin <= 3.2.40 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Eduardo Estevao de Oliveira Azevedo in WordPress Zephyr Project Manager plugin versions = 3.2.40. Solution Update the WordPress Zephyr Project Manager plugin to the latest available version at least 3.2.41...

6.1CVSS2.2AI score0.01031EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2022/05/18 12:0 a.m.26 views

WordPress JupiterX premium theme <= 2.0.6 - Authenticated Path Traversal and Local File Inclusion (LFI) vulnerability

Authenticated Path Traversal and Local File Inclusion LFI vulnerability discovered by Ramuel Gall WordFence in WordPress JupiterX premium theme versions = 2.0.6. Solution Update the WordPress JupiterX premium theme to the latest available version at least 2.0.7...

8.8CVSS2.5AI score0.01624EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2022/05/17 12:0 a.m.26 views

WordPress WP Athletics plugin <= 1.1.7 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Wejdan Alomari in WordPress WP Athletics plugin versions = 1.1.7. Solution Deactivate and delete. This plugin has been closed as of April 28, 2022 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS3.1AI score0.00757EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2022/05/16 12:0 a.m.26 views

WordPress Photo Gallery plugin <= 1.6.3 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by 0ppr2s in WordPress Photo Gallery plugin versions = 1.6.3. Solution Update the WordPress Photo Gallery plugin to the latest available version at least 1.6.4...

4.8CVSS2AI score0.01017EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2022/05/12 12:0 a.m.26 views

WordPress Note Press plugin <= 0.1.10 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability was discovered by Daniel Krohmer and Shi Chen in the WordPress Note Press plugin versions = 0.1.10. Solution Deactivate and delete. This plugin has been closed as of May 12, 2022 and is not available for download. This closure is temporary, pending a...

4CVSS2.8AI score0.0078EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2022/05/09 12:0 a.m.26 views

WordPress Call&Book Mobile Bar plugin <= 1.2.2 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability was discovered by Vinay Varma Mudunuri and Krishna Harsha Kondaveeti in the WordPress Call&Book Mobile Bar plugin versions = 1.2.2. Solution Deactivate and delete. This plugin has been closed as of April 19, 2022 and is not available for download. Thi...

4.8CVSS1.3AI score0.00577EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2022/04/28 12:0 a.m.26 views

WordPress Footer Text plugin <= 2.0.3 - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS vulnerability discovered by Rasi Afeef in WordPress Footer Text plugin versions = 2.0.3. Solution No patched version is available. No response from the vendor...

6.1CVSS2.2AI score0.00373EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/04/28 12:0 a.m.26 views

WordPress Countdown & Clock plugin <= 2.4.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Jeong Wonjun aka Pongchi Patchstack Alliance in WordPress Countdown & Clock plugin versions = 2.4.7. Solution No patched version is available...

5.9CVSS3.6AI score0.00419EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/04/26 12:0 a.m.26 views

WordPress Vertical scroll recent post plugin <= 13.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress Vertical scroll recent post plugin versions = 13.8. Solution Update the WordPress Vertical scroll recent post plugin to the latest available version at least 14.0...

6.1CVSS2AI score0.00788EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2022/04/13 12:0 a.m.26 views

WordPress Easily Generate Rest API Url plugin <= 1.0.0 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by websafe2021 in WordPress Easily Generate Rest API Url plugin versions = 1.0.0. Solution Deactivate and delete. This plugin has been closed as of 29 March 2022 and is not available for download. This closure is temporary, pending a full...

4.8CVSS2.1AI score0.00588EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2022/04/11 12:0 a.m.26 views

WordPress SiteSuperCharger plugin <= 5.1.10 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by cydave in WordPress SiteSuperCharger plugin versions = 5.1.10. Solution Update the WordPress SiteSuperCharger plugin to the latest available version at least 5.2.0...

9.8CVSS2.9AI score0.01582EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2022/03/29 12:0 a.m.26 views

WordPress DW Question & Answer Pro premium plugin <= 1.3.4 - Arbitrary Comment Edition via IDOR vulnerability

Arbitrary Comment Edition via IDOR vulnerability discovered by Brandon Roldan in WordPress DW Question & Answer Pro premium plugin versions = 1.3.4. Solution No patched version is available...

4.3CVSS4.7AI score0.00644EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2022/03/28 12:0 a.m.26 views

WordPress Easy Digital Downloads plugin <= 2.11.5 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Muhamad Hidayat in WordPress Easy Digital Downloads plugin versions = 2.11.5. Solution Update the WordPress Easy Digital Downloads plugin to the latest available version at least 2.11.6...

4.8CVSS1.9AI score0.0065EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2022/03/28 12:0 a.m.26 views

WordPress RSVP and Event Management plugin <= 2.7.7 - Unauthenticated Entries Export vulnerability

Unauthenticated Entries Export vulnerability discovered by Daniel Ruf in WordPress RSVP and Event Management plugin versions = 2.7.7. Solution Update the WordPress RSVP and Event Management plugin to the latest available version at least 2.7.8...

5.3CVSS2.8AI score0.04213EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2022/03/28 12:0 a.m.26 views

WordPress Thank Me Later plugin <= 3.3.4 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability was discovered by Ankur Bakre in WordPress Thank Me Later plugin versions = 3.3.4. Solution Deactivate and delete. This plugin has been closed as of March 24, 2022 and is not available for download. This closure is temporary, pending a full review...

4.8CVSS2.3AI score0.00588EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2022/03/23 12:0 a.m.26 views

WordPress Simple Event Planner plugin <= 1.5.4 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerabilities discovered by Ex.Mi Patchstack in WordPress Simple Event Planner plugin versions = 1.5.4. Solution Update the WordPress Simple Event Planner plugin to the latest available version at least 1.5.5...

5.4CVSS2.5AI score0.00562EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/03/16 12:0 a.m.26 views

WordPress LearnPress plugin <= 4.1.5 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress LearnPress plugin versions = 4.1.5. Solution Update the WordPress LearnPress plugin to the latest available version at least 4.1.6...

6.1CVSS2.2AI score0.02254EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2022/03/07 12:0 a.m.26 views

WordPress Interactive Medical Drawing of Human Body plugin <= 1.0 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Rubina Shaikh in WordPress Interactive Medical Drawing of Human Body plugin versions = 1.0. Solution Deactivate and delete. This plugin has been closed as of February 17, 2022 and is not available for download. This closure is temporary,...

4.8CVSS1.2AI score0.00588EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2022/03/07 12:0 a.m.26 views

WordPress Wow Countdowns plugin <= 3.1.2 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by 0xdecafbad in WordPress Wow Countdowns plugin versions = 3.1.2. Solution Deactivate and delete. This plugin has been closed as of January 18, 2022 and is not available for download. This closure is temporary, pending a full review...

7.2CVSS3.3AI score0.01306EPSS
SaveExploits2References3Affected Software1
Total number of security vulnerabilities5000