52760 matches found
WordPress Participants Database plugin <= 2.7.8.3 - SQL Injection vulnerability
SQL Injection vulnerability discovered by L4m in WordPress Plugin Participants Database versions = 2.7.8.3...
WordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin PayU India versions = 3.8.9...
WordPress Easy Digital Downloads plugin <= 3.6.7 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by James Paremain in WordPress Plugin Easy Digital Downloads versions = 3.6.7...
WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Abdullah Kareem "cyberkareem" in WordPress Plugin Modula Image Gallery versions 2.14.25-2.14.30...
WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Virtue/Ascend/Pinnacle Toolkit versions = 4.9.12...
WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Ninja Tables versions = 5.2.10...
WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Kit formerly ConvertKit versions = 3.3.5...
WordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Luis Koleski in WordPress Plugin Avada Core versions = 5.15.6...
WordPress Fluent Support plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Support versions = 2.3.0...
WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by z3r0s in WordPress Plugin AWP Classifieds versions = 4.4.7...
WordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin JetBooking versions = 4.1.2...
WordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin JetBooking versions = 4.1.2...
WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin JetEngine versions = 3.8.11...
WordPress JetElements For Elementor plugin <= 2.9.1.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin JetElements For Elementor versions = 2.9.1.1...
WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by jhhack in WordPress Plugin GiveWP versions = 4.16.3...
WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability
WordPress Masteriyo - LMS plugin = 2.3.1 - Insecure Direct Object References IDOR vulnerability discovered by Celvex Group in WordPress Plugin Masteriyo - LMS versions = 2.3.1...
WordPress Really Simple CSV Importer plugin <= 1.3 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple CSV Importer versions = 1.3...
WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Uncanny Automator versions = 7.3.2...
WordPress Zarinpal Gateway plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Zarinpal Gateway versions = 5.1.0...
WordPress Polylang plugin <= 3.8.5 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Polylang versions = 3.8.5...
WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ЮKassa для WooCommerce versions = 2.16.1...
WordPress MapSVG plugin <= 8.14.0 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Securepeak Research Team in WordPress Plugin MapSVG versions = 8.14.0...
WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Product Slider for WooCommerce versions = 1.13.62...
WordPress Quiz And Survey Master plugin <= 11.2.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by anhcd05 in WordPress Plugin Quiz And Survey Master versions = 11.2.0...
WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Ebook Store versions = 6.19...
WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by benzdeus in WordPress Plugin Ebook Store versions = 6.19...
WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin MapSVG versions = 8.14.0...
WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin MapSVG versions = 8.14.0...
WordPress MapSVG plugin <= 8.14.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin MapSVG versions = 8.14.0...
NPM: fast-uri vulnerable to host confusion via literal backslash authority delimiter
NPM: fast-uri vulnerable to host confusion via literal backslash authority delimiter vulnerability discovered by ? in WordPress Npm fast-uri versions = 2.3.1, = 2.4.2...
NPM: sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591
NPM: sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 discovered by ? in WordPress Npm sharp versions 0.35.0...
NPM: fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits
NPM: fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits vulnerability discovered by ? in WordPress Npm fast-xml-parser versions = 5.9.3, 5.10.1...
NPM: TypeORM: migration:generate template-literal code injection
NPM: TypeORM: migration:generate template-literal code injection vulnerability discovered by ? in WordPress Npm typeorm versions 0.3.31...
WordPress Ultimate Addons for Elementor plugin <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Ultimate Addons for Elementor - Lite versions = 2.9.1...
NPM: SVGO removeScripts plugin leaves some executable scripts intact
NPM: SVGO removeScripts plugin leaves some executable scripts intact vulnerability discovered by ? in WordPress Npm svgo versions = 1.0.0, 2.8.3...
NPM: DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.
NPM: DOMPurify: CUSTOMELEMENTHANDLING bypasses afterSanitizeElements for allowed custom elements. vulnerability discovered by ? in WordPress Npm dompurify versions = 3.4.11...
NPM: linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text
NPM: linkify-it: Quadratic-complexity DoS via the mailto: validator scan-loop on attacker text vulnerability discovered by ? in WordPress Npm linkify-it versions = 5.0.1...
NPM: aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling
NPM: aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling vulnerability discovered by ? in WordPress Npm aws-cdk-lib versions 2.260.0...
NPM: fast-uri vulnerable to host confusion via failed IDN canonicalization
NPM: fast-uri vulnerable to host confusion via failed IDN canonicalization vulnerability discovered by ? in WordPress Npm fast-uri versions = 2.3.1, 2.4.2...
NPM: Immutabl: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set
NPM: Immutabl: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set vulnerability discovered by ? in WordPress Npm immutable versions 4.3.9...
WordPress License Manager for WooCommerce plugin <= 3.0.17 - Arbitrary Content Deletion vulnerability
Arbitrary Content Deletion vulnerability discovered by WiniS in WordPress Plugin License Manager for WooCommerce versions = 3.0.17...
NPM: Immutable.js `List` 32-bit trie overflow → unrecoverable DoS
NPM: Immutable.js List 32-bit trie overflow → unrecoverable DoS vulnerability discovered by ? in WordPress Npm immutable versions 4.3.9...
NPM: hono/jsx does not isolate context per request, leading to cross-request data disclosure
NPM: hono/jsx does not isolate context per request, leading to cross-request data disclosure vulnerability discovered by ? in WordPress Npm hono versions = 4.11.8, 4.12.27...
NPM: Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility
NPM: Hono: Server-Side XSS via JSX Escaping Bypass in cx Utility vulnerability discovered by ? in WordPress Npm hono versions = 4.0.0, 4.12.27...
NPM: Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication
NPM: Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication vulnerability discovered by ? in WordPress Npm hono versions = 4.3.3, 4.12.27...
WordPress MailPoet plugin 5.30.0-5.33.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin MailPoet versions 5.30.0-5.33.0...
WordPress MarketKing plugin <= 2.1.40 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin MarketKing versions = 2.1.40...
WordPress Easy Form Builder plugin <= 4.0.12 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Easy Form Builder versions = 4.0.12...
WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability
WordPress Masteriyo - LMS plugin = 2.3.0 - Cross Site Scripting XSS vulnerability discovered by K. Sorrachat in WordPress Plugin Masteriyo - LMS versions = 2.3.0...
WordPress Product Enquiry for WooCommerce plugin <= 2.2.34.43 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by duna in WordPress Plugin Product Enquiry for WooCommerce versions = 2.2.34.43...