52802 matches found
WordPress Avada (Fusion) Builder plugin <= 3.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Zbigniew Piotrak in WordPress Plugin Fusion Builder versions = 3.15.5...
WordPress Smart Slider 3 plugin <= 3.5.1.37 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure vulnerability
Missing Authorization to Authenticated Contributor+ Sensitive Information Exposure vulnerability discovered by Yuvraj Tomar in WordPress Plugin Smart Slider 3 versions = 3.5.1.37...
WordPress Academy LMS plugin <= 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference vulnerability
Authenticated Subscriber+ Insecure Direct Object Reference vulnerability discovered by sorawautsukushiii in WordPress Plugin Academy LMS versions = 3.8.0...
WordPress ووسلام – همگام سازی ووکامرس و باسلام plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ووسلام همگام سازی ووکامرس و باسلام versions = 1.9.1...
WordPress گرویتی فرم فارسی plugin <= 3.0.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin گرویتی فرم فارسی versions = 3.0.2...
WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin <= 1.8.21 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WooCommerce Bulk Edit Products – WP Sheet Editor versions = 1.8.21...
NPM: SafeInstall agent guard shell parsing can miss raw package execution
NPM: SafeInstall agent guard shell parsing can miss raw package execution vulnerability discovered by ? in WordPress Npm safeinstall-cli versions 0.10.2...
NPM: adm-zip: Crafted ZIP file triggers 4GB memory allocation
NPM: adm-zip: Crafted ZIP file triggers 4GB memory allocation vulnerability discovered by ? in WordPress Npm adm-zip versions 0.6.0...
WordPress NEX-Forms – Ultimate Forms Plugin for WordPress plugin <= 9.2.2 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification vulnerability
Missing Authorization to Unauthenticated Arbitrary Form Entry Modification vulnerability discovered by Michael Iden Mickhat in WordPress Plugin NEX-Forms versions = 9.2.2...
WordPress Cost Calculator Builder plugin <= 4.0.11 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by oper999 in WordPress Plugin Cost Calculator Builder versions = 4.0.11...
WordPress Wallet for WooCommerce plugin <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) User/Email Enumeration vulnerability
Missing Authorization to Authenticated Subscriber+ User/Email Enumeration vulnerability discovered by Mitchell in WordPress Plugin TeraWallet – For WooCommerce versions = 1.6.4...
WordPress fresh Podcaster plugin <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin fresh Podcaster versions = 1.0.7...
WordPress Catalyst Connect Zoho CRM Client Portal plugin <= 2.2.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by siyuan shao in WordPress Plugin Catalyst Connect Zoho CRM Client Portal versions = 2.2.0...
WordPress Context Blog theme <= 1.3.5 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ryoma Nishioka in WordPress Theme Context Blog versions = 1.3.5...
WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.7.27 - Missing Authorization to Unauthenticated Arbitrary Inquiry Reply Injection vulnerability
Missing Authorization to Unauthenticated Arbitrary Inquiry Reply Injection vulnerability discovered by Niv Kochan in WordPress Plugin WCFM – Frontend Manager for WooCommerce versions = 6.7.27...
WordPress WP Easy Pay – Payment and Donation form Builder for Square plugin <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Status Modification vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary Post Status Modification vulnerability discovered by PRISM in WordPress Plugin WP EasyPay versions = 4.5.0...
WordPress Widgets for Google Reviews plugin <= 13.3 - Authenticated (Editor+) Stored Cross-Site Scripting vulnerability
Authenticated Editor+ Stored Cross-Site Scripting vulnerability discovered by coih in WordPress Plugin Widgets for Google Reviews versions = 13.3...
WordPress White Label CMS plugin <= 2.7.12 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by Tal Kantor in WordPress Plugin White Label CMS versions = 2.7.12...
WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.7.27 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Vendor Data Manipulation vulnerability
Authenticated Subscriber+ Missing Authorization to Arbitrary Vendor Data Manipulation vulnerability discovered by mrholmes, papadope in WordPress Plugin WCFM – Frontend Manager for WooCommerce versions = 6.7.27...
WordPress WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin <= 3.7.3 - Authenticated (Vendor+) Stored Cross-Site Scripting vulnerability
Authenticated Vendor+ Stored Cross-Site Scripting vulnerability discovered by Nadir Şensoy in WordPress Plugin WCFM Marketplace versions = 3.7.3...
NPM: tarteaucitron: data-cookie attribute can be used to delete arbitrary cookies
NPM: tarteaucitron: data-cookie attribute can be used to delete arbitrary cookies vulnerability discovered by ? in WordPress Npm tarteaucitronjs versions 1.33.0...
WordPress Agentic Help Desk plugin for WordPress – Live Chat, AI Chatbot & Ticketing – ThriveDesk plugin <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Cache Deletion vulnerability
Missing Authorization to Authenticated Subscriber+ Cache Deletion vulnerability discovered by Legion Hunter in WordPress Plugin ThriveDesk versions = 2.1.7...
WordPress Themify Builder plugin <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by PRISM in WordPress Plugin Themify Builder versions = 7.7.6...
WordPress Themify Builder plugin <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by PRISM in WordPress Plugin Themify Builder versions = 7.7.6...
WordPress Starboard Suite Reservation Calendars plugin <= 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin Starboard Suite Reservation Calendars versions = 3.1.4...
WordPress AI Copilot – Content Generator plugin <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Modification vulnerability
Missing Authorization to Unauthenticated Arbitrary Modification vulnerability discovered by Kazuma Matsumoto in WordPress Plugin AIWU versions = 1.4.12...
WordPress AI Copilot – Content Generator plugin <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Data Deletion vulnerability
Missing Authorization to Unauthenticated Arbitrary Data Deletion vulnerability discovered by Kazuma Matsumoto in WordPress Plugin AIWU versions = 1.4.12...
WordPress Affiliate Program & Referral Tracking for WooCommerce & WordPress – Affilia plugin <= 3.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Status Modification vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary Status Modification vulnerability discovered by loris4py in WordPress Plugin Affiliate Program & Referral Tracking for WooCommerce & WordPress – Affilia versions = 3.3.3...
WordPress Solace Extra plugin <= 1.5.3 - Missing Authorization to Unauthenticated Arbitrary Content Deletion vulnerability
Missing Authorization to Unauthenticated Arbitrary Content Deletion vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os in WordPress Plugin Solace Extra versions = 1.5.3...
WordPress Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin <= 4.11.84 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Chloe Chamberland, PRISM in WordPress Plugin Premium Addons for Elementor versions = 4.11.84...
WordPress Print, PDF & Email by PrintFriendly plugin <= 5.5.10 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by ZAST.AI in WordPress Plugin Print, PDF, Email by PrintFriendly versions = 5.5.10...
WordPress PDF Invoices & Packing Slips for WooCommerce plugin <= 5.14.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure vulnerability
Insecure Direct Object Reference to Authenticated Contributor+ Sensitive Information Disclosure vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin WooCommerce PDF Invoices & Packing Slips versions = 5.14.0...
WordPress Notification for Telegram plugin <= 3.5.1 - Missing Authorization to Authenticated (Subscriber+) Cron Modification vulnerability
Missing Authorization to Authenticated Subscriber+ Cron Modification vulnerability discovered by Pattama Tangpoonponwiwat Kwan in WordPress Plugin Notification for Telegram versions = 3.5.1...
NPM: morgan vulnerable to Log Forging via unneutralized control characters in :remote-user
NPM: morgan vulnerable to Log Forging via unneutralized control characters in :remote-user vulnerability discovered by ? in WordPress Npm morgan versions = 1.2.0, = 1.10.1...
WordPress MyParcel plugin <= 4.25.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Shipment Data Disclosure and Modification vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary Order Shipment Data Disclosure and Modification vulnerability discovered by nudien udin, nudien in WordPress Plugin MyParcel versions = 4.25.1...
WordPress Mux Video Uploader plugin <= 1.1.4 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ren Voza in WordPress Plugin Mux Video Uploader versions = 1.1.4...
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by PRISM - Wordfence in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.6.1...
WordPress Members plugin <= 3.2.22 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by an unknown individual in WordPress Plugin Members versions = 3.2.22...
WordPress KiviCare plugin <= 4.5.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by PRISM - Wordfence in WordPress Plugin KiviCare versions = 4.5.0...
WordPress KiviCare plugin <= 4.5.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by PRISM - Wordfence in WordPress Plugin KiviCare versions = 4.5.0...
WordPress Points and Rewards for WooCommerce plugin <= 2.10.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary Modification vulnerability discovered by Latz in WordPress Plugin Points and Rewards for WooCommerce versions = 2.10.1...
WordPress WP Google Maps Pro plugin <= 10.1.02 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Austin Ginder in WordPress Plugin WP Google Maps Pro versions = 10.1.02...
WordPress NEX-Forms plugin <= 9.2.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin NEX-Forms versions = 9.2.2...
WordPress Document Gallery plugin <= 5.1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Document Gallery versions = 5.1.0...
WordPress ICS Calendar plugin <= 12.1.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin ICS Calendar versions = 12.1.1...
WordPress SupportCandy plugin <= 3.4.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Abduljalal Saminu in WordPress Plugin SupportCandy versions = 3.4.8...
WordPress WPZOOM Portfolio plugin <= 1.4.29 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Thaer Assfour in WordPress Plugin WPZOOM Portfolio versions = 1.4.29...
WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Breakdance versions = 2.7.1...
WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Funnel Builder by FunnelKit versions = 3.15.0.8...