52727 matches found
WordPress Tickera – Sell Tickets & Manage Events plugin <= 3.6.0.1 - Authenticated (Staff+) SQL Injection vulnerability
Authenticated Staff+ SQL Injection vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Tickera versions = 3.6.0.1...
WordPress Premium Packages – Sell Digital Products Securely plugin <= 7.0.4 - Authenticated (Admin+) SQL Injection vulnerability
Authenticated Admin+ SQL Injection vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WPDM – Premium Packages versions = 7.0.4...
WordPress GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin <= 2.4.12 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability
Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Viet Anh Ngo in WordPress Plugin GutenKit versions = 2.4.12...
WordPress Grid/List View for WooCommerce plugin <= 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Grid List View for WooCommerce versions = 3.0.9...
WordPress Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin <= 1.46.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Accessibility Checker by Equalize Digital versions = 1.46.0...
WordPress Bulk Page Generator – LPagery plugin <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Bulk Landing Page Creator for WordPress LPagery versions = 2.5.7...
WordPress Brands for WooCommerce plugin <= 3.8.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting vulnerability
Authenticated Shop Manager+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Brands for WooCommerce versions = 3.8.8...
WordPress Brands for WooCommerce plugin <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Brands for WooCommerce versions = 3.8.8...
WordPress Webpushr plugin <= 4.41.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Webpushr versions = 4.41.0...
WordPress WP Shortcode by MyThemeShop plugin <= 1.4.17 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WP Shortcode by MyThemeShop versions = 1.4.17...
NPM: n8n: Google Service Account Private Key Exposed in JWT Header
NPM: n8n: Google Service Account Private Key Exposed in JWT Header vulnerability discovered by ? in WordPress Npm n8n versions 1.123.64...
NPM: n8n: Stored DOM XSS via Resource Locator `cachedResultUrl`
NPM: n8n: Stored DOM XSS via Resource Locator cachedResultUrl vulnerability discovered by ? in WordPress Npm n8n versions 1.123.64...
NPM: n8n: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview
NPM: n8n: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview vulnerability discovered by ? in WordPress Npm n8n versions 1.123.64...
NPM: n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
NPM: n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution vulnerability discovered by ? in WordPress Npm n8n versions 1.123.64...
NPM: n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool
NPM: n8n: AI Agents Project Viewer Privilege Escalation via runnodetool vulnerability discovered by ? in WordPress Npm n8n versions 2.29.8...
WordPress Tabs plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Tabs versions = 2.5...
WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme <= 7.5.4 - Cross Site Scripting (XSS) vulnerability
WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme = 7.5.4 - Cross Site Scripting XSS vulnerability discovered by ed32.dll in WordPress Theme Manual - Documentation, Knowledge Base & Education WordPress Theme versions = 7.5.4...
WordPress Complianz plugin <= 7.5.1 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Complianz versions = 7.5.1...
WordPress Complianz plugin <= 7.5.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Complianz versions = 7.5.1...
WordPress Complianz plugin <= 7.5.1 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Complianz versions = 7.5.1...
WordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin Query Wrangler versions = 1.5.57...
WordPress Create by Mediavine plugin <= 2.5.5 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Que Thanh Tuan in WordPress Plugin Create by Mediavine versions = 2.5.5...
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Steven Julian in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.6.2...
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by Steven Julian in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.6.2...
WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Phat RiO in WordPress Theme Photography versions = 7.7.6...
WordPress Event post plugin <= 6.1.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin Event post versions = 6.1.0...
WordPress Payment Gateway for PayPal on WooCommerce plugin <= 9.1.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Payment Gateway for PayPal on WooCommerce versions = 9.1.4...
WordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin Content Control versions = 2.6.5...
WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin Style Kits versions = 2.6.5...
WordPress HashThemes Demo Importer plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Mike Montoya in WordPress Plugin HashThemes Demo Importer versions = 1.4.3...
WordPress eRoom plugin <= 1.7.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin eRoom versions = 1.7.1...
WordPress Mediavine Control Panel plugin <= 2.10.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Mediavine Control Panel versions = 2.10.10...
WordPress WP Accessibility Helper (WAH) plugin <= 0.6.6 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Accessibility Helper WAH versions = 0.6.6...
WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin eRoom versions = 1.7.1...
WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Nabil Irawan in WordPress Plugin Create by Mediavine versions = 2.5.3...
WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by buitu in WordPress Plugin miniOrange Discord Integration versions = 2.2.4...
WordPress WP Go Maps plugin <= 10.1.05 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin WP Go Maps versions = 10.1.05...
WordPress Photo Gallery by Supsystic plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Mrreee in WordPress Plugin Photo Gallery by Supsystic versions = 1.16.3...
WordPress Photo Block plugin <= 1.7.1 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Arif Shaikh in WordPress Plugin Photo Block versions = 1.7.1...
WordPress Ditty plugin <= 3.1.66 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Ditty versions = 3.1.66...
WordPress QuickCal - Appointment Booking Calendar for WordPress plugin <= 1.0.16 - Broken Access Control vulnerability
WordPress QuickCal - Appointment Booking Calendar for WordPress plugin = 1.0.16 - Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin QuickCal - Appointment Booking Calendar for WordPress versions = 1.0.16...
WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin uListing versions = 2.2.0...
WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin uListing versions = 2.2.0...
WordPress Hubbub Lite plugin <= 1.36.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Hubbub Lite versions = 1.36.3...
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Abu Hurayra in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.6.2...
WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Taylsec in WordPress Plugin SMS Alert Order Notifications versions = 3.9.6...
WordPress WP Fast Total Search plugin <= 1.81.282 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin WP Fast Total Search versions = 1.81.282...
WordPress YT Player plugin <= 2.0.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin YT Player versions = 2.0.9...
WordPress Participants Database plugin <= 2.7.8.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Participants Database versions = 2.7.8.4...