WordPress Bricksforge plugin < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro Forms vulnerability

Unauthenticated Arbitrary Password Reset via Pro Forms vulnerability discovered by moonge in WordPress Plugin Bricksforge versions 3.1.8.8...

WordPress WP Photo Album Plus plugin <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection vulnerability

Authenticated Subscriber+ Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection vulnerability discovered by daroo in WordPress Plugin WP Photo Album Plus versions = 9.2.09.002...

WordPress Gravity Forms plugin <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field vulnerability

Unauthenticated Arbitrary File Upload via Hidden File Upload Field vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin Gravity Forms versions = 3.1.0.4...

WordPress Forminator Forms plugin <= 1.57.2 - Unauthenticated Arbitrary Shortcode Execution via 'current_url' Parameter vulnerability

Unauthenticated Arbitrary Shortcode Execution via 'currenturl' Parameter vulnerability discovered by Kuba in WordPress Plugin Forminator versions = 1.57.2...

WordPress WP Recipe Maker plugin <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content vulnerability

Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin WP Recipe Maker versions = 10.8.1...

WordPress WP2Social Auto Publish plugin <= 2.4.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'pages' Parameter vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via 'pages' Parameter vulnerability discovered by Luca Jungnickel in WordPress Plugin WP2Social Auto Publish versions = 2.4.12...

WordPress Hotel Booking Lite plugin < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint vulnerability

Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint vulnerability discovered by Haitam Lazaar in WordPress Plugin Hotel Booking Lite versions 6.2.3...

WordPress SEO Booster plugin <= 7.4.7 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Modification via handle_oauth_callback() vulnerability

Authenticated Subscriber+ Missing Authorization to Arbitrary Options Modification via handleoauthcallback vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin SEO Booster versions = 7.4.7...

WordPress Save as PDF Plugin by PDFCrowd plugin <= 4.6.1 - Authenticated (Contributor+) Arbitrary Function Invocation / Code Injection via 'pdf_created_callback' Shortcode Attribute vulnerability

Authenticated Contributor+ Arbitrary Function Invocation / Code Injection via 'pdfcreatedcallback' Shortcode Attribute vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Save as PDF versions = 4.6.1...

WordPress Tutor LMS plugin <= 4.0.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'student_id' Parameter vulnerability

Insecure Direct Object Reference to Authenticated Subscriber+ Sensitive Information Exposure via 'studentid' Parameter vulnerability discovered by Dthangws - PTIT in WordPress Plugin Tutor LMS versions = 4.0.8...

WordPress Tutor LMS plugin <= 4.0.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion via 'lesson_id' Parameter vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Deletion via 'lessonid' Parameter vulnerability discovered by EUNHO KIM - Hyundai Autoever in WordPress Plugin Tutor LMS versions = 4.0.8...

WordPress Divi Essentials plugin <= 5.8.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Information Disclosure vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Divi Essentials versions = 5.8.1...

WordPress Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin <= 2.15.33 - Unauthenticated Information Exposure Spoofing vulnerability

Unauthenticated Information Exposure Spoofing vulnerability discovered by Jonah Burgess CryptoCat in WordPress Plugin BP Better Messages versions = 2.15.33...

WordPress Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin <= 2.15.22 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Jonah Burgess CryptoCat in WordPress Plugin BP Better Messages versions = 2.15.22...

WordPress Dictionary plugin <= 1.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Dictionary versions = 1.0...

WordPress WPLP Cookie Consent plugin < 4.4.4 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions 4.4.4...

WordPress Dewa Kirim plugin <= 1.0.0 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin Dewa Kirim versions = 1.0.0...

WordPress Dictionary plugin <= 1.0 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin Dictionary versions = 1.0...

WordPress WP Travel Engine plugin < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_image vulnerability

Subscriber+ Arbitrary Media File Move via userprofileimage vulnerability discovered by marim00 in WordPress Plugin WP Travel Engine versions 6.8.1...

WordPress Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin <= 2.15.33 - Missing Authorization to Authenticated (Custom+) Chat-Room Transcript Disclosure vulnerability

Missing Authorization to Authenticated Custom+ Chat-Room Transcript Disclosure vulnerability discovered by Supakiad S. m3ez in WordPress Plugin BP Better Messages versions = 2.15.33...

WordPress ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin <= 3.5.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Kuba in WordPress Plugin ShopLentor versions = 3.5.1...

WordPress Checkout Field Manager (Checkout Manager) for WooCommerce plugin 7.4.9-7.9.6 - Subscriber+ Arbitrary Attachment Deletion vulnerability

Subscriber+ Arbitrary Attachment Deletion vulnerability discovered by PO-WEI TING Dinlon5566, Open Information Security Inc. in WordPress Plugin WooCommerce Checkout Manager versions 7.4.9-7.9.6...

WordPress Live Copy Paste for Elementor plugin <= 1.5.6 - Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Live Copy Paste for Elementor versions = 1.5.6...

WordPress Pixel Gallery Addons for Elementor plugin <= 2.1.14 - Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Pixel Gallery Addons for Elementor versions = 2.1.14...

WordPress Smart Admin Assistant plugin <= 2.2.0 - Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Smart Admin Assistant versions = 2.2.0...

WordPress Ultimate Store Kit plugin <= 3.0.7 - Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Ultimate Store Kit Elementor Addons versions = 3.0.7...

WordPress Prime Slider plugin <= 4.4.5 - Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Prime Slider – Addons For Elementor versions = 4.4.5...

WordPress Element Pack Addons for Elementor plugin <= 8.7.14 - Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Element Pack Elementor Addons versions = 8.7.14...

WordPress Booking Calendar plugin <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter vulnerability

Authenticated Editor+ Privilege Escalation to 'dataname' Parameter vulnerability discovered by Wordfence PRISM in WordPress Plugin Booking Calendar versions = 11.8.2...

WordPress Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin 2.0.5-5.1.0 - Subscriber+ Arbitrary Form Submission Deletion vulnerability

Subscriber+ Arbitrary Form Submission Deletion vulnerability discovered by JunHee CHO in WordPress Plugin Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant versions 2.0.5-5.1.0...

WordPress Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by daroo in WordPress Plugin Jeg Kit for Elementor versions = 3.2.16...

WordPress EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin <= 4.6.5 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by crow in WordPress Plugin EmbedPress versions = 4.6.5...

WordPress Complianz GDPR/CCPA Cookie Consent Banner plugin <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Complianz versions = 7.5.4...

WordPress Newsletter – Send awesome emails from WordPress plugin <= 9.3.8 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Yuto Hyakumoto in WordPress Plugin Newsletter versions = 9.3.8...

WordPress Qi Addons For Elementor plugin <= 1.11 - Reflected DOM-Based Cross-Site Scripting vulnerability

Reflected DOM-Based Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin Qi Addons For Elementor versions = 1.11...

WordPress Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin <= 1.24.0 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Naoya Takahashi nakko in WordPress Plugin Popup Maker versions = 1.24.0...

WordPress All-in-One WP Migration and Backup plugin < 7.111 - Authenticated Privilege Escalation to Admin vulnerability

Authenticated Privilege Escalation to Admin vulnerability discovered by Charles Vosburgh in WordPress Plugin All-in-One WP Migration versions 7.111...

WordPress AF Companion plugin < 2.2.0 - Shop Manager+ Arbitrary File Upload to RCE vulnerability

Shop Manager+ Arbitrary File Upload to RCE vulnerability discovered by Farhan Fawwaz Saputra in WordPress Plugin AF Companion versions 2.2.0...

WordPress Easy Form Builder by WhiteStudio plugin 4.0.0-4.1.3- Unauthenticated Stored XSS vulnerability

WordPress Easy Form Builder by WhiteStudio plugin 4.0.0-4.1.3- Unauthenticated Stored XSS vulnerability discovered by Civitasmass in WordPress Plugin Easy Form Builder versions 4.0.0-4.1.3...

WordPress VikBooking Hotel Booking Engine & PMS plugin 1.8.8-1.8.14 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by anhdung1329 in WordPress Plugin VikBooking Hotel Booking Engine & PMS versions 1.8.8-1.8.14...

WordPress Booking Calendar plugin <= 11.8.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Yuto Hyakumoto in WordPress Plugin Booking Calendar versions = 11.8.2...

WordPress Breeze Cache plugin 1.2.5-2.5.14 - Unauthenticated Cache Poisoning vulnerability

Unauthenticated Cache Poisoning vulnerability discovered by Amity Gilmour in WordPress Plugin Breeze versions 1.2.5-2.5.14...

WordPress Easy Form Builder by WhiteStudio plugin 4.0.0-4.1.3- Unauthenticated Registration Policy Bypass vulnerability

WordPress Easy Form Builder by WhiteStudio plugin 4.0.0-4.1.3- Unauthenticated Registration Policy Bypass vulnerability discovered by Artus KG in WordPress Plugin Easy Form Builder versions 4.0.0-4.1.3...

WordPress Really Simple Security plugin 8.1.6-9.8.2 - Unauthenticated Unbounded Option Growth vulnerability

Unauthenticated Unbounded Option Growth vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Really Simple SSL versions 8.1.6-9.8.2...

WordPress iGMS Direct Booking plugin < 2.0 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin iGMS Direct Booking versions 2.0...

WordPress Generate PDF using Contact Form 7 plugin < 4.2.2 - Unauthenticated Server-Side Request Forgery vulnerability

Unauthenticated Server-Side Request Forgery vulnerability discovered by Artus KG in WordPress Plugin Generate PDF using Contact Form 7 versions 4.2.2...

WordPress UpsellWP plugin 1.4.4-2.2.9 - Unauthenticated Price Manipulation vulnerability

Unauthenticated Price Manipulation vulnerability discovered by Pedro Pinho in WordPress Plugin UpsellWP versions 1.4.4-2.2.9...

WordPress Filter Gallery plugin 1.1.2-1.1.4 - Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion vulnerability

Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion vulnerability discovered by Seongwon Lee in WordPress Plugin Filter Gallery versions 1.1.2-1.1.4...

WordPress Bookit — Booking & Appointment Calendar plugin < 2.6.0.5 - Bookit Staff+ Arbitrary Appointment Deletion vulnerability

Bookit Staff+ Arbitrary Appointment Deletion vulnerability discovered by hieus in WordPress Plugin BookIt versions 2.6.0.5...

NPM: Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text

NPM: Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text vulnerability discovered by ? in WordPress Npm paella-core versions 1.50.6...