WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by SVO in WordPress Plugin Fluent CRM versions = 3.2.5...

WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by AndrewN in WordPress Plugin FluentCart versions = 1.7.1...

WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by AndrewN in WordPress Plugin Fluent CRM versions = 3.2.5...

WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by AndrewN in WordPress Plugin Everest Forms versions = 3.6.1...

WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability

SQL Injection vulnerability discovered by AndrewN in WordPress Plugin Amelia versions = 2.4.10...

WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Masaya Morita @mrtmyix in WordPress Plugin BSK PDF Manager versions = 3.8.1...

WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin MLS On The Fly versions = 1.8.1.5...

WordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by John Ryan Albon in WordPress Plugin WP Crowdfunding versions = 2.2.2...

WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by nov1337 in WordPress Plugin User Registration versions = 5.2.8...

WordPress Books Gallery plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Books Gallery versions = 4.8.4...

WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by sumayfe in WordPress Plugin User Registration versions = 5.2.8...

WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by mrhaji8 in WordPress Plugin Link Whisper Free versions = 0.9.7...

WordPress WOLF plugin <= 1.1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by iczdblindman in WordPress Plugin WOLF versions = 1.1.1...

WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pr0f in WordPress Plugin User Registration versions = 5.2.8...

WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by hooman in WordPress Plugin Active Products Tables for WooCommerce versions = 2.1.3...

WordPress User Registration plugin <= 5.2.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by b1ue0cean in WordPress Plugin User Registration versions = 5.2.8...

WordPress FOX plugin <= 1.5.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Je22y in WordPress Plugin FOX versions = 1.5.4...

WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Charles Vosburgh in WordPress Plugin User Registration versions = 5.2.8...

WordPress SureCart plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dzaku in WordPress Plugin SureCart versions = 4.9.4...

WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin PowerPack Addons for Elementor versions = 3.1.0...

WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Prime Slider – Addons For Elementor versions = 4.7.1...

WordPress FluentBoards plugin <= 2.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Hamza Tlili in WordPress Plugin FluentBoards versions = 2.1.0...

WordPress Premium Addons for Elementor plugin <= 4.11.110 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dzaku in WordPress Plugin Premium Addons for Elementor versions = 4.11.110...

WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Parlix in WordPress Plugin Amelia versions = 2.4.10...

WordPress WP User Manager plugin <= 2.9.23 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Truebird in WordPress Plugin WP User Manager versions = 2.9.23...

WordPress Pay for Payment for WooCommerce plugin <= 3.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by myhappyhoon in WordPress Plugin Pay for Payment for WooCommerce versions = 3.0.1...

WordPress Quick Paypal Payments plugin <= 6.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Oly Hossen in WordPress Plugin Quick Paypal Payments versions = 6.0.3...

WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dzaku in WordPress Plugin SureForms versions = 2.12.7...

WordPress WPGraphQL plugin <= 2.23.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Heinrihs Skrodelis in WordPress Plugin WPGraphQL versions = 2.24.2...

WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FV Simpler SEO versions = 1.9.7...

WordPress Chained Quiz plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Chained Quiz versions = 1.4.1...

WordPress Post Video Players plugin <= 1.165 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Post Video Players versions = 1.165...

WordPress Podamibe Custom User Gravatar plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Podamibe Custom User Gravatar versions = 1.0.8...

WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Razorpay Payment Button Elementor Plugin versions = 1.2.8...

WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by Julieta in WordPress Plugin AjaxLoadMore Cache versions = 3.1.1...

WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ayukiab in WordPress Plugin GEO my WordPress versions = 4.5.5.3...

WordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by mamgad in WordPress Plugin Blockonomics versions 3.11.0...

WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dzaku in WordPress Plugin YouTube Showcase versions = 4.1.0...

WordPress WP Testimonials plugin <= 1.4.13 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Jaze in WordPress Plugin WP Testimonials versions = 1.4.13...

WordPress Responsive Slider plugin <= 0.1.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Responsive Slider versions = 0.1.9...

WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FV Simpler SEO versions = 1.9.7...

WordPress IMPress for IDX Broker plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin IMPress for IDX Broker versions = 3.3.1...

WordPress Weaver Xtreme theme Support plugin <= 7.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Weaver Xtreme Theme Support versions = 7.1...

WordPress Bricks Builder theme <= 2.4.2 - Author+ Stored Cross Site Scripting (XSS) via SVG File Upload vulnerability

Author+ Stored Cross Site Scripting XSS via SVG File Upload vulnerability discovered by Patchstack in WordPress Theme Bricks Builder versions = 2.4.2...

WordPress Bricks Builder theme <= 2.4.2 - Unauthenticated Arbitrary Post Modification via Form Submission vulnerability

Unauthenticated Arbitrary Post Modification via Form Submission vulnerability discovered by Patchstack in WordPress Theme Bricks Builder versions = 2.4.2...

WordPress Bricks Builder theme <= 2.4.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Patchstack in WordPress Theme Bricks Builder versions = 2.4.2...

WordPress Bricks Builder theme <= 2.4.2 - Author+ Privilege Escalation via User Registration Form vulnerability

Author+ Privilege Escalation via User Registration Form vulnerability discovered by Patchstack in WordPress Theme Bricks Builder versions = 2.4.2...

WordPress Ad Inserter – Ad Manager & AdSense Ads plugin <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters vulnerability

Authenticated Subscriber+ Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters vulnerability discovered by Michal Kanas Thor in WordPress Plugin Ad Inserter versions = 2.8.18...

WordPress WP-Members plugin <= 3.5.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin WP-Members versions = 3.5.7...

WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability

Race Condition vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Events Manager versions = 7.4.8...