WordPress Skydropx plugin <= 2.1.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nixxies in WordPress Plugin Skydropx versions = 2.1.4...

WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by AndrewN in WordPress Plugin Best Payments Plugin for WP versions = 4.6.27...

WordPress Hippoo Mobile App for WooCommerce plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by sengtocxoen in WordPress Plugin Hippoo Mobile App for WooCommerce versions = 1.12.0...

WordPress SimplyRETS Real Estate IDX plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Tang in WordPress Plugin SimplyRETS Real Estate IDX versions = 3.2.9...

WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by Peter Tang in WordPress Plugin MDTF versions = 1.3.9...

WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability

Content Injection vulnerability discovered by cazy in WordPress Plugin Salevo versions = 1.3.0...

WordPress Patreon WordPress plugin <= 1.9.17 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Asim Alshaya in WordPress Plugin Patreon WordPress versions = 1.9.17...

WordPress Patreon WordPress plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by mamgad in WordPress Plugin Patreon WordPress versions = 1.10.0...

WordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dcs in WordPress Plugin Salevo versions = 1.3.0...

WordPress Subscribe to Comments plugin < 2.3.3 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Het Kalariya in WordPress Plugin Subscribe to Comments versions 2.3.3...

WordPress Piotnet Forms plugin <= 1.0.30 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Claude Ndanda TrixX in WordPress Plugin Piotnet Forms versions = 1.0.30...

WordPress Veeqo for WooCommerce plugin <= 2.2.8 - Subscriber+ Arbitrary File Upload vulnerability

Subscriber+ Arbitrary File Upload vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Veeqo for WooCommerce versions = 2.2.8...

WordPress Datalist it plugin <= 0.0.3 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Datalist it versions = 0.0.3...

WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by hhhai in WordPress Plugin Quiz And Survey Master versions = 11.2.7...

WordPress Premium Addons for Elementor plugin <= 4.11.110 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Premium Addons for Elementor versions = 4.11.110...

WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Andrei in WordPress Plugin Forminator versions = 1.58.0...

WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dzeusking in WordPress Plugin Booktics versions = 1.0.28...

WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Element Pack Elementor Addons versions = 8.8.8...

WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Broadcast Live Video versions = 7.3.6...

WordPress paymendo plugin <= 1.1 - Subscriber+ SQLi vulnerability

Subscriber+ SQLi vulnerability discovered by Erwan LR WPScan in WordPress Plugin paymendo versions = 1.1...

WordPress paymendo plugin <= 1.1 - Unauthenticated Blind SQLi vulnerability

Unauthenticated Blind SQLi vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin paymendo versions = 1.1...

WordPress Post Voting System plugin <= 1.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Post Voting System versions = 1.0...

WordPress WP Verify API plugin <= 1.0.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by RIA Labs in WordPress Plugin WP Verify API versions = 1.0.0...

WordPress Loja Automática plugin <= 1.0.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Loja Automática versions = 1.0.0...

WordPress ASPL Product Quotation plugin <= 1.1.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin ASPL Product Quotation versions = 1.1.0...

WordPress WP Posts Password Batch Manager plugin <= 1.1 - Unauthenticated Bulk Post Password Rewrite vulnerability

Unauthenticated Bulk Post Password Rewrite vulnerability discovered by Naoki Kawahigashi in WordPress Plugin WP Posts Password Batch Manager versions = 1.1...

WordPress WP-Partner plugin <= 1.2.1 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Raúl Conesa in WordPress Plugin WP-Partner versions = 1.2.1...

WordPress WpCues Basic Quiz plugin <= 1.6.5 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin WpCues Basic Quiz versions = 1.6.5...

WordPress Recordbrowser plugin <= 1.1.7 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Theo Antonio da Fonseca in WordPress Plugin Recordbrowser versions = 1.1.7...

WordPress Llavero.io plugin <= 0.1.4 - Unauthenticated Blind SQLi vulnerability

Unauthenticated Blind SQLi vulnerability discovered by RIA Labs in WordPress Plugin Llavero.io versions = 0.1.4...

WordPress Social Web Suite plugin <= 4.1.12 - Unauthenticated Blind SQLi vulnerability

Unauthenticated Blind SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Social Web Suite versions = 4.1.12...

WordPress KeyWord Collector plugin <= 1.4 - Unauthenticated Stored XSS and Settings Update vulnerability

Unauthenticated Stored XSS and Settings Update vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin KeyWord Collector versions = 1.4...

WordPress Topcontent plugin <= 1.2.1 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Topcontent versions = 1.2.1...

WordPress Site Setup Wizard plugin <= 1.5.8 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin Site Setup Wizard versions = 1.5.8...

WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by cazy in WordPress Plugin Paid Videochat Turnkey Site versions = 7.5.13...

WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by myhappyhoon in WordPress Plugin Booktics versions = 1.0.28...

WordPress Disable Users plugin <= 1.0.5 - Disabled Account Authentication Bypass vulnerability

Disabled Account Authentication Bypass vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Disable Users versions = 1.0.5...

WordPress SmugMug Embed plugin <= 3.13 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin SmugMug Embed versions = 3.13...

WordPress BuddyPress Instant Chat plugin <= 1.6 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin BuddyPress Instant Chat versions = 1.6...

WordPress Adwised Web Push Notification plugin <= 2.5.7 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Adwised Web Push Notification versions = 2.5.7...

WordPress Adwised Web Push Notification plugin <= 2.5.7 - Subscriber+ Stored XSS vulnerability

Subscriber+ Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Adwised Web Push Notification versions = 2.5.7...

WordPress Web Vitals Tracking plugin <= 5.4.2 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Web Vitals Tracking versions = 5.4.2...

WordPress HootBoard plugin <= 3.1.4 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin HootBoard versions = 3.1.4...

WordPress Insurify plugin <= 1.0 - Unauthenticated Arbitrary Option Deletion vulnerability

Unauthenticated Arbitrary Option Deletion vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Insurify versions = 1.0...

WordPress Quick quotes plugin <= 1.0.0 - Unauthenticated Integer-Value Option Update vulnerability

Unauthenticated Integer-Value Option Update vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Quick quotes versions = 1.0.0...

WordPress Crowdfundly plugin <= 2.2.2 - Crowdfundly Manager+ Privilege Escalation vulnerability

Crowdfundly Manager+ Privilege Escalation vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Crowdfundly versions = 2.2.2...

WordPress Insurify plugin <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite vulnerability

Unauthenticated Arbitrary Option Creation and Overwrite vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Insurify versions = 1.0...

WordPress AI Content Generator Marketing plugin <= 1.0.0 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin AI Content Generator Marketing versions = 1.0.0...

WordPress Freeton WP plugin <= 1.0.0 - Unauthenticated Account Takeover vulnerability

Unauthenticated Account Takeover vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Freeton WP versions = 1.0.0...

WordPress Mindstien Quick Login plugin <= 1.0 - Unauthenticated Administrator Account Takeover vulnerability

Unauthenticated Administrator Account Takeover vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Mindstien Quick Login versions = 1.0...