Lucene search
+L
PatchstackMost viewed

47819 matches found

Patchstack
Patchstack
added 2021/09/14 12:0 a.m.21 views

WordPress Software License Manager plugin <= 4.5.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Jetpack Scan Team in WordPress Software License Manager plugin versions = 4.5.0. Solution Update the WordPress Software License Manager plugin to the latest available version at least 4.5.1...

8.8CVSS3.3AI score0.00667EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/09/13 12:0 a.m.21 views

WordPress Support Board plugin <= 3.3.3 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities

Multiple Unauthenticated SQL Injection SQLi vulnerabilities were discovered by John Jefferson Li in the WordPress Support Board plugin versions = 3.3.3. Solution Update the WordPress Support Board plugin to the latest available version at least 3.3.4...

9.8CVSS2.4AI score0.05603EPSS
SaveExploits3References3Affected Software1
Patchstack
Patchstack
added 2021/09/09 12:0 a.m.21 views

WordPress WP-T-Wap plugin <= 1.13.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress WP-T-Wap plugin versions = 1.13.2. Solution This plugin has been closed as of September 7, 2021 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS2.8AI score0.00895EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2021/09/09 12:0 a.m.21 views

WordPress InviteBox Plugin for viral Refer-a-Friend Promotions <= 1.4.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress InviteBox Plugin for viral Refer-a-Friend Promotions versions = 1.4.1. Solution This plugin has been closed as of September 7, 2021 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS2.9AI score0.00819EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2021/09/09 12:0 a.m.21 views

WordPress Post Title Counter plugin <= 1.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress Post Title Counter plugin versions = 1.1. Solution This plugin has been closed as of September 7, 2021 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS2.4AI score0.00895EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2021/09/07 12:0 a.m.21 views

WordPress Chained Quiz plugin <= 1.2.7.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Shivam Rai in WordPress Chained Quiz plugin versions = 1.2.7.1. Solution Update the WordPress Chained Quiz plugin to the latest available version at least 1.2.7.1...

5.4CVSS1.9AI score0.00604EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/09/02 12:0 a.m.21 views

WordPress GeoDirectory plugin <= 2.1.1.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Thinkland Security Team in WordPress GeoDirectory plugin versions = 2.1.1.2. Solution Update the WordPress GeoDirectory plugin to the latest available version at least 2.1.1.3...

5.4CVSS2.1AI score0.00854EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/09/02 12:0 a.m.21 views

WordPress Meow Gallery plugin <= 4.1.8 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by apple502j in WordPress Meow Gallery plugin versions = 4.1.8. Solution Update the WordPress Meow Gallery plugin to the latest available version at least 4.1.9...

8.1CVSS3.5AI score0.01168EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/08/25 12:0 a.m.21 views

WordPress Nested Pages plugin <= 3.1.15 - Open Redirect vulnerability

Open Redirect vulnerability discovered by Ram Gall WordFence in WordPress Nested Pages plugin versions = 3.1.15. Solution Update the WordPress Nested Pages plugin to the latest available version at least 3.1.16...

6.1CVSS2.6AI score0.00826EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2021/08/24 12:0 a.m.21 views

WordPress Booster for WooCommerce plugin <= 5.4.3 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by Chloe Chamberland WordFence in WordPress Booster for WooCommerce plugin versions = 5.4.3. Solution Update the WordPress Booster for WooCommerce plugin to the latest available version at least 5.4.4...

9.8CVSS2.8AI score0.50869EPSS
SaveExploits8References3Affected Software1
Patchstack
Patchstack
added 2021/08/17 12:0 a.m.21 views

WordPress Icegram plugin <= 2.0.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in WordPress Icegram plugin versions = 2.0.2. Vulnerable at "Headline" &messagedata16headline input. Solution Update the WordPress Icegram plugin to the latest available version at least 2.0.3...

5.4CVSS1.7AI score0.00552EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2021/08/16 12:0 a.m.21 views

WordPress WP Courses LMS plugin <= 2.0.43 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Tri Wanda Septian in WordPress WP Courses LMS plugin versions = 2.0.43. Solution Update the WordPress WP Courses LMS plugin to the latest available version at least 2.0.44...

4.8CVSS2.1AI score0.00617EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/08/16 12:0 a.m.21 views

WordPress WordPress Advanced Ticket System plugin <= 1.0.63 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Tri Wanda Septian in WordPress WordPress Advanced Ticket System plugin versions = 1.0.63. Solution Update the WordPress WordPress Advanced Ticket System plugin to the latest available version at least 1.0.64...

4.8CVSS2.8AI score0.00617EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/08/13 12:0 a.m.21 views

WordPress Custom Post Type Relations plugin <= 1.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress Custom Post Type Relations plugin = 1.0. Solution This plugin has been closed as of August 12, 2021 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS1.8AI score0.00895EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2021/07/30 12:0 a.m.21 views

WordPress Nifty Newsletters plugin <= 4.0.23 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS discovered by Kohei Hino Cryptography Laboratory - Tokyo Denki University in WordPress Nifty Newsletters plugin versions = 4.0.23. Solution This plugin has been closed as of July 29, 2021 and is not available...

8.8CVSS0.7AI score0.007EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/07/30 12:0 a.m.21 views

WordPress youForms plugin <= 1.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by xiahao in WordPress youForms plugin versions = 1.0.5. Solution This plugin has been closed as of July 30, 2021 and is not available for download. This closure is temporary, pending a full review...

4.8CVSS2.8AI score0.02754EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2021/07/26 12:0 a.m.21 views

WordPress Poll Maker plugin <= 3.2.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Xu-Liang Liao in WordPress Poll Maker plugin versions = 3.2.8. Solution Update the WordPress Poll Maker plugin to the latest available version at least 3.2.9...

6.1CVSS2.7AI score0.00938EPSS
SaveExploits3References3Affected Software1
Patchstack
Patchstack
added 2021/07/23 12:0 a.m.21 views

WordPress Broken Link Manager plugin <= 0.6.5 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Shreya Pohekar in WordPress Broken Link Manager plugin versions = 0.6.5. Solution This plugin has been closed as of June 1, 2021 and is not available for download. Reason: Security Issue...

7.2CVSS3.6AI score0.01578EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/07/06 12:0 a.m.21 views

WordPress Marmoset Viewer plugin <= 1.9.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by John Jackson in WordPress Marmoset Viewer plugin versions = 1.9.2. Solution Update the WordPress Marmoset Viewer plugin to the latest available version at least 1.9.3...

6.1CVSS2.5AI score0.03343EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/06/29 12:0 a.m.21 views

WordPress Portfolio Responsive Gallery plugin <= 1.1.7 - Authenticated Blind SQL Injection (SQLi) vulnerability

Authenticated Blind SQL Injection SQLi vulnerability discovered by To Quang Duong in WordPress Portfolio Responsive Gallery plugin versions = 1.1.7. Solution Update the WordPress Portfolio Responsive Gallery plugin to the latest available version at least 1.1.8...

8.8CVSS2.7AI score0.014EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/06/29 12:0 a.m.21 views

WordPress RSVPMaker plugin <= 8.7.2 - Authenticated Server-Side Request Forgery (SSRF) vulnerability

Authenticated Server-Side Request Forgery SSRF vulnerability discovered by Shreya Pohekar in WordPress RSVPMaker plugin versions = 8.7.2. Solution Update the WordPress RSVPMaker plugin to the latest available version at least 8.7.3...

4CVSS3.6AI score0.01012EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/06/28 12:0 a.m.21 views

WordPress Youzify plugin <= 1.0.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Phu Tran in WordPress Youzify plugin versions = 1.0.6. Solution Update the WordPress Youzify plugin to the latest available version at least 1.0.7...

5.4CVSS1.8AI score0.0062EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2021/06/21 12:0 a.m.21 views

WordPress Staff Directory Plugin: Company Directory <= 3.6 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Jerome Bruandet NinTechNet in WordPress Staff Directory Plugin: Company Directory versions = 3.6. Solution Update the WordPress Staff Directory Plugin: Company Directory to the latest available version at least 4.0...

3.7AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2021/06/21 12:0 a.m.21 views

WordPress Sign-up Sheets plugin <= 1.0.13 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ajay Sandipan Thorbole in WordPress Sign-up Sheets plugin versions = 1.0.13. Solution Update the WordPress Sign-up Sheets plugin to the latest available version at least 1.0.14...

4.8CVSS2.1AI score0.00617EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/06/16 12:0 a.m.21 views

WordPress Request a Quote plugin <= 2.3.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ajay Sandipan Thorbole in WordPress Request a Quote plugin versions = 2.3.0. Solution Update the WordPress Request a Quote plugin to the latest available version at least 2.3.4...

5.4CVSS2.9AI score0.00624EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/06/16 12:0 a.m.21 views

WordPress Filebird plugin 4.7.3 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by Ravi Chandra in WordPress Filebird plugin version 4.7.3. Solution Update the WordPress Filebird plugin to the latest available version at least 4.7.4...

9.8CVSS2.6AI score0.02848EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/06/07 12:0 a.m.21 views

WordPress WP Hardening plugin <= 1.2.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by dc11 in WordPress WP Hardening plugin versions = 1.2.1. Solution Update the WordPress WP Hardening plugin to the latest available version at least 1.2.2...

6.1CVSS1.1AI score0.00827EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/05/31 12:0 a.m.21 views

WordPress FooGallery plugin <= 2.0.30 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by avolume in WordPress FooGallery plugin versions = 2.0.30. Solution Update the WordPress FooGallery plugin to the latest available version at least 2.0.35...

5.4CVSS2.3AI score0.00624EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/05/31 12:0 a.m.21 views

WordPress Admin Columns PRO premium plugin <= 5.4.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Daniel Elkabes WhiteSource in WordPress Admin Columns PRO premium plugin versions = 5.4.4. Solution Update the WordPress Admin Columns PRO premium plugin to the latest available version at least 5.5.1...

5.4CVSS2.2AI score0.00997EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2021/05/27 12:0 a.m.21 views

WordPress Sendit WP Newsletter plugin <= 2.5.1 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Shreya Pohekar in WordPress Sendit WP Newsletter plugin versions = 2.5.1. Solution This plugin has been closed as of April 29, 2021 and is not available for download. This closure is temporary, pending a full review...

6.6CVSS2.8AI score0.01338EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/05/13 12:0 a.m.21 views

WordPress <= 5.7.1 - Object injection in PHPMailer vulnerability

Object injection in PHPMailer vulnerability discovered in WordPress one security issue affecting WordPress versions between 3.7 and 5.7. Solution Update the WordPress to the latest available version at least 5.7.2. All WordPress versions since 3.7 have also been updated to fix the following...

3.1AI score0.03095EPSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
added 2021/05/10 12:0 a.m.21 views

WordPress Speed Booster Pack plugin <= 4.1.3 - Authenticated Remote Code Execution (RCE) vulnerability

Authenticated Remote Code Execution RCE vulnerability discovered by m0ze in WordPress Speed Booster Pack plugin versions = 4.1.3 to be more precise = 4.2.0-beta. Solution Update the WordPress Speed Booster Pack plugin to the latest available version at least 4.2.0...

7.2CVSS4.7AI score0.01721EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/04/29 12:0 a.m.21 views

WordPress Smooth Scroll Page Up/Down Buttons WordPress plugin <= 1.4 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Smooth Scroll Page Up/Down Buttons WordPress plugin versions = 1.4. Solution 2021-04-29 - No patched version is available...

4.8CVSS2.3AI score0.00626EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/04/27 12:0 a.m.21 views

WordPress Pods plugin <= 2.7.26 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by WhiteSource in WordPress Pods plugin versions = 2.7.26. Solution Update the WordPress Pods plugin to the latest available version at least 2.7.27...

5.4CVSS1.8AI score0.00792EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2021/04/21 12:0 a.m.21 views

WordPress Accordion plugin <= 2.2.29 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered by iohex in WordPress Accordion plugin versions = 2.2.29. Solution Update the WordPress Accordion plugin to the latest available version at least 2.2.30...

5.4CVSS2.5AI score0.00624EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/04/16 12:0 a.m.21 views

WordPress QIWI for WooCommerce plugin <= 0.0.9 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by Frank Liauw in WordPress QIWI for WooCommerce plugin versions = 0.0.9. Solution This plugin has been closed as of April 12, 2021 and is not available for download. This closure is temporary, pending a full review...

3AI score0.01261EPSS
SaveExploits2References2Affected Software1
Patchstack
Patchstack
added 2021/04/09 12:0 a.m.21 views

WordPress Media File Renamer plugin <= 5.1.9 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Ngo Van Thien Patchstack Red Team in the WordPress Media File Renamer plugin versions = 5.1.9. Affected parameters "posttitle", "filename", "lock". This allows changing the uploaded media title, media file name, and media locking state...

5.4CVSS3.7AI score0.00438EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2021/03/11 12:0 a.m.21 views

WordPress JH 404 Logger plugin <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ganesh Bagaria in WordPress JH 404 Logger plugin versions = 1.1. Solution Deactivate and delete. This plugin has been closed as of February 11, 2021 and is not available for download. Reason: Security Issue...

5.4CVSS3.4AI score0.02044EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/03/04 12:0 a.m.21 views

WordPress WooCommerce Upload Files premium plugin <= 59.3 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability found by WordFence in WordPress WooCommerce Upload Files premium plugin versions = 59.3. Solution Update the WordPress WooCommerce Upload Files premium plugin to the latest available version at least 59.4...

9.8CVSS3.6AI score0.01899EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2021/02/24 12:0 a.m.21 views

WordPress YITH WooCommerce Gift Cards plugin <= 3.3.0 - Arbitrary File Upload to Remote Code Execution (RCE) vulnerability

Arbitrary File Upload to Remote Code Execution RCE vulnerability found by Guy Liu in WordPress YITH WooCommerce Gift Cards plugin versions = 3.3.0. Solution Update the WordPress YITH WooCommerce Gift Cards plugin to the latest available version at least 3.3.1...

10CVSS5.4AI score0.36781EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2021/01/15 12:0 a.m.21 views

WordPress FV Flowplayer Video Player plugin <= 7.4.37.727 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability found by Arcangelo Saracino in WordPress FV Flowplayer Video Player plugin versions = 7.4.37.727. Solution Update the WordPress FV Flowplayer Video Player plugin to the latest available version at least 7.4.38.727...

5.4CVSS2.9AI score0.0092EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2021/01/10 12:0 a.m.21 views

WordPress EasyBook premium theme <= 1.2.1 - Persistent Cross-Site Scripting (XSS) vulnerability

Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress EasyBook premium theme versions = 1.2.1. Solution Update the WordPress EasyBook premium theme to the latest available version at least 1.2.2...

6.1CVSS2.1AI score0.02582EPSS
SaveExploits4References2Affected Software1
Patchstack
Patchstack
added 2020/12/29 12:0 a.m.21 views

WordPress Site Offline plugin <= 1.4.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities found in WordPress Site Offline plugin versions = 1.4.2. Solution Update the WordPress Site Offline plugin to the latest available version at least 1.4.4...

8.8CVSS3.6AI score0.0097EPSS
SaveExploits1References2Affected Software1
Patchstack
Patchstack
added 2020/12/07 12:0 a.m.21 views

WordPress Easy WP SMTP plugin <= 1.4.2 - Unauthenticated Admin Password Reset

Unauthenticated Admin Password Reset vulnerability found by mathieg2 in WordPress Easy WP SMTP plugin versions = 1.4.2. Solution Update the WordPress Easy WP SMTP plugin to the latest available version at least 1.4.3. Attention! Please make sure you have a directory listing disabled since it coul...

1.8AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2020/10/29 12:0 a.m.21 views

WordPress <= 5.5.1 - XML-RPC Privilege Escalation vulnerability

XML-RPC Privilege Escalation vulnerability found by Justin Tran in WordPress versions = 5.5.1. Solution Update the WordPress to the latest available version at least 5.5.2...

3.7AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2020/10/14 12:0 a.m.21 views

WordPress Live Chat - Live support plugin <= 3.1.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Yusuke Fukuda Cryptography Laboratory, Department of Information and Communication Engineering, Tokyo Denki University in WordPress Live Chat - Live support plugin versions = 3.1.0. Solution Update the WordPress Live Chat - Live support plugi...

8.8CVSS2.9AI score0.00818EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2020/10/01 12:0 a.m.21 views

WordPress NewsMag theme <= 2.4.1 - Unauthenticated Function Injection vulnerability

Unauthenticated Function Injection vulnerability found by Jerome Bruandet NinTechNet WordPress NewsMag theme versions = 2.4.1. Solution Update the WordPress NewsMag theme to the latest available version at least 2.4.2...

2.9AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2020/07/17 12:0 a.m.21 views

WordPress Email Subscribers & Newsletters <= 4.5.0.1 - Authenticated SQL injection (SQLi) vulnerability

Authenticated SQL injection SQLi vulnerability found by Tenable in WordPress Email Subscribers & Newsletters versions = 4.5.0.1. Solution Update the WordPress Email Subscribers & Newsletters to the latest available version at least 4.5.1...

4.9CVSS2.8AI score0.01966EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2020/06/17 12:0 a.m.21 views

WordPress Testimonial Rotator plugin <= 3.0.2 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Vu Dong in WordPress Testimonial Rotator plugin versions = 3.0.2. Solution Update the WordPress Testimonial Rotator plugin to the latest available version at least 3.0.3...

5.4CVSS2.1AI score0.00717EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2020/05/28 12:0 a.m.21 views

WordPress PageLayer – Drag and Drop website builder plugin <= 1.1.1 - Unprotected AJAX and Nonce Disclosure to Stored Cross-Site Scripting (XSS)

Unprotected AJAX and Nonce Disclosure to Stored Cross-Site Scripting XSS discovered by WordFence in WordPress PageLayer – Drag and Drop website builder plugin versions = 1.1.1. Solution Update the WordPress PageLayer – Drag and Drop website builder plugin to the latest available version at least...

7.4CVSS1.4AI score0.01089EPSS
SaveExploits2References3Affected Software1
Total number of security vulnerabilities5000