47801 matches found
WordPress Payment Gateway for PayPal on WooCommerce plugin <= 9.1.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Payment Gateway for PayPal on WooCommerce versions = 9.1.4...
WordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin Content Control versions = 2.6.5...
WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin Style Kits versions = 2.6.5...
WordPress HashThemes Demo Importer plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Mike Montoya in WordPress Plugin HashThemes Demo Importer versions = 1.4.3...
WordPress eRoom plugin <= 1.7.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin eRoom versions = 1.7.1...
WordPress Mediavine Control Panel plugin <= 2.10.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Mediavine Control Panel versions = 2.10.10...
WordPress WP Accessibility Helper (WAH) plugin <= 0.6.6 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Accessibility Helper WAH versions = 0.6.6...
WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin eRoom versions = 1.7.1...
WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Nabil Irawan in WordPress Plugin Create by Mediavine versions = 2.5.3...
WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by buitu in WordPress Plugin miniOrange Discord Integration versions = 2.2.4...
WordPress Photo Gallery by Supsystic plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Mrreee in WordPress Plugin Photo Gallery by Supsystic versions = 1.16.3...
WordPress WP Go Maps plugin <= 10.1.05 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin WP Go Maps versions = 10.1.05...
WordPress Photo Block plugin <= 1.7.1 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Arif Shaikh in WordPress Plugin Photo Block versions = 1.7.1...
WordPress Ditty plugin <= 3.1.66 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Ditty versions = 3.1.66...
WordPress QuickCal - Appointment Booking Calendar for WordPress plugin <= 1.0.16 - Broken Access Control vulnerability
WordPress QuickCal - Appointment Booking Calendar for WordPress plugin = 1.0.16 - Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin QuickCal - Appointment Booking Calendar for WordPress versions = 1.0.16...
WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin uListing versions = 2.2.0...
WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin uListing versions = 2.2.0...
WordPress Hubbub Lite plugin <= 1.36.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Hubbub Lite versions = 1.36.3...
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Abu Hurayra in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.6.2...
WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Taylsec in WordPress Plugin SMS Alert Order Notifications versions = 3.9.6...
WordPress WP Fast Total Search plugin <= 1.81.282 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin WP Fast Total Search versions = 1.81.282...
WordPress YT Player plugin <= 2.0.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin YT Player versions = 2.0.9...
WordPress Participants Database plugin <= 2.7.8.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Participants Database versions = 2.7.8.4...
WordPress Vino theme <= 1.9 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Vino versions = 1.9...
WordPress TheGem theme <= 5.11.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme TheGem versions = 5.11.1...
WordPress WP BASE Booking plugin <= 6.3.1 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Afan in WordPress Plugin WP BASE Booking versions = 6.3.1...
WordPress Reviewer plugin <= 3.14.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin Reviewer versions = 3.14.2...
WordPress Thrive Quiz Builder plugin <= 10.9.3.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by VanTastic in WordPress Plugin Thrive Quiz Builder versions = 10.9.3.0...
WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin ListingPro versions = 2.9.10...
WordPress Tonda Core plugin <= 2.1.2 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Tonda Core versions = 2.1.2...
WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Civi versions = 2.2.4...
WordPress WP-Polls plugin <= 2.77.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by japaneseknotweed in WordPress Plugin WP-Polls versions = 2.77.3...
WordPress Advanced Views plugin <= 3.8.11 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin Advanced Views versions = 3.8.11...
WordPress HTML5 Video Player plugin <= 5.3.4.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin HTML5 Video Player versions = 5.3.4.0...
WordPress Image&Video FullScreen Background plugin <= 1.6.8 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Image&Video FullScreen Background versions = 1.6.8...
WordPress Kali Forms plugin <= 2.4.18 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by daroo in WordPress Plugin Kali Forms versions = 2.4.18...
WordPress Logos Showcase plugin <= 2.5 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Logos Showcase versions = 2.5...
WordPress Ziina plugin <= 1.2.21 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Mitchell in WordPress Plugin Ziina versions = 1.2.21...
WordPress Participants Database plugin <= 2.7.8.3 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by hhhai in WordPress Plugin Participants Database versions = 2.7.8.3...
WordPress PIMP - Creative MultiPurpose theme <= 1.7 - Cross Site Request Forgery (CSRF) vulnerability
WordPress PIMP - Creative MultiPurpose theme = 1.7 - Cross Site Request Forgery CSRF vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme PIMP - Creative MultiPurpose versions = 1.7...
WordPress Mailster plugin <= 4.1.17 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Phat RiO in WordPress Plugin Mailster versions = 4.1.17...
WordPress Participants Database plugin <= 2.7.8.3 - SQL Injection vulnerability
SQL Injection vulnerability discovered by L4m in WordPress Plugin Participants Database versions = 2.7.8.3...
WordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin PayU India versions = 3.8.9...
WordPress Easy Digital Downloads plugin <= 3.6.7 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by James Paremain in WordPress Plugin Easy Digital Downloads versions = 3.6.7...
WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Abdullah Kareem "cyberkareem" in WordPress Plugin Modula Image Gallery versions 2.14.25-2.14.30...
WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Virtue/Ascend/Pinnacle Toolkit versions = 4.9.12...
WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Ninja Tables versions = 5.2.10...
WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Kit formerly ConvertKit versions = 3.3.5...
WordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Luis Koleski in WordPress Plugin Avada Core versions = 5.15.6...
WordPress Fluent Support plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Support versions = 2.3.0...