WordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by mamgad in WordPress Plugin Blockonomics versions 3.11.0...

WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dzaku in WordPress Plugin YouTube Showcase versions = 4.1.0...

WordPress WP Testimonials plugin <= 1.4.13 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Jaze in WordPress Plugin WP Testimonials versions = 1.4.13...

WordPress Responsive Slider plugin <= 0.1.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Responsive Slider versions = 0.1.9...

WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FV Simpler SEO versions = 1.9.7...

WordPress IMPress for IDX Broker plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin IMPress for IDX Broker versions = 3.3.1...

WordPress Weaver Xtreme theme Support plugin <= 7.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Weaver Xtreme Theme Support versions = 7.1...

WordPress Bricks Builder theme <= 2.4.2 - Author+ Privilege Escalation via User Registration Form vulnerability

Author+ Privilege Escalation via User Registration Form vulnerability discovered by Patchstack in WordPress Theme Bricks Builder versions = 2.4.2...

WordPress Bricks Builder theme <= 2.4.2 - Author+ Stored Cross Site Scripting (XSS) via SVG File Upload vulnerability

Author+ Stored Cross Site Scripting XSS via SVG File Upload vulnerability discovered by Patchstack in WordPress Theme Bricks Builder versions = 2.4.2...

WordPress Bricks Builder theme <= 2.4.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Patchstack in WordPress Theme Bricks Builder versions = 2.4.2...

WordPress Bricks Builder theme <= 2.4.2 - Unauthenticated Arbitrary Post Modification via Form Submission vulnerability

Unauthenticated Arbitrary Post Modification via Form Submission vulnerability discovered by Patchstack in WordPress Theme Bricks Builder versions = 2.4.2...

WordPress Ad Inserter – Ad Manager & AdSense Ads plugin <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters vulnerability

Authenticated Subscriber+ Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters vulnerability discovered by Michal Kanas Thor in WordPress Plugin Ad Inserter versions = 2.8.18...

WordPress WP-Members plugin <= 3.5.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin WP-Members versions = 3.5.7...

WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability

Race Condition vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Events Manager versions = 7.4.8...

WordPress Skydropx plugin <= 2.1.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nixxies in WordPress Plugin Skydropx versions = 2.1.4...

WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by AndrewN in WordPress Plugin Best Payments Plugin for WP versions = 4.6.27...

WordPress Hippoo Mobile App for WooCommerce plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by sengtocxoen in WordPress Plugin Hippoo Mobile App for WooCommerce versions = 1.12.0...

WordPress SimplyRETS Real Estate IDX plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Tang in WordPress Plugin SimplyRETS Real Estate IDX versions = 3.2.9...

WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by Peter Tang in WordPress Plugin MDTF versions = 1.3.9...

WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability

Content Injection vulnerability discovered by cazy in WordPress Plugin Salevo versions = 1.3.0...

WordPress Patreon WordPress plugin <= 1.9.17 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Asim Alshaya in WordPress Plugin Patreon WordPress versions = 1.9.17...

WordPress Patreon WordPress plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by mamgad in WordPress Plugin Patreon WordPress versions = 1.10.0...

WordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dcs in WordPress Plugin Salevo versions = 1.3.0...

WordPress Subscribe to Comments plugin < 2.3.3 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Het Kalariya in WordPress Plugin Subscribe to Comments versions 2.3.3...

WordPress Piotnet Forms plugin <= 1.0.30 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Claude Ndanda TrixX in WordPress Plugin Piotnet Forms versions = 1.0.30...

WordPress Veeqo for WooCommerce plugin <= 2.2.8 - Subscriber+ Arbitrary File Upload vulnerability

Subscriber+ Arbitrary File Upload vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Veeqo for WooCommerce versions = 2.2.8...

WordPress Datalist it plugin <= 0.0.3 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Datalist it versions = 0.0.3...

WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by hhhai in WordPress Plugin Quiz And Survey Master versions = 11.2.7...

WordPress Premium Addons for Elementor plugin <= 4.11.110 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Premium Addons for Elementor versions = 4.11.110...

WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Andrei in WordPress Plugin Forminator versions = 1.58.0...

WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dzeusking in WordPress Plugin Booktics versions = 1.0.28...

WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Element Pack Elementor Addons versions = 8.8.8...

WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Broadcast Live Video versions = 7.3.6...

WordPress paymendo plugin <= 1.1 - Subscriber+ SQLi vulnerability

Subscriber+ SQLi vulnerability discovered by Erwan LR WPScan in WordPress Plugin paymendo versions = 1.1...

WordPress paymendo plugin <= 1.1 - Unauthenticated Blind SQLi vulnerability

Unauthenticated Blind SQLi vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin paymendo versions = 1.1...

WordPress Post Voting System plugin <= 1.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Post Voting System versions = 1.0...

WordPress WP Verify API plugin <= 1.0.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by RIA Labs in WordPress Plugin WP Verify API versions = 1.0.0...

WordPress Loja Automática plugin <= 1.0.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Loja Automática versions = 1.0.0...

WordPress ASPL Product Quotation plugin <= 1.1.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin ASPL Product Quotation versions = 1.1.0...

WordPress WP Posts Password Batch Manager plugin <= 1.1 - Unauthenticated Bulk Post Password Rewrite vulnerability

Unauthenticated Bulk Post Password Rewrite vulnerability discovered by Naoki Kawahigashi in WordPress Plugin WP Posts Password Batch Manager versions = 1.1...

WordPress WP-Partner plugin <= 1.2.1 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Raúl Conesa in WordPress Plugin WP-Partner versions = 1.2.1...

WordPress WpCues Basic Quiz plugin <= 1.6.5 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin WpCues Basic Quiz versions = 1.6.5...

WordPress Recordbrowser plugin <= 1.1.7 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Theo Antonio da Fonseca in WordPress Plugin Recordbrowser versions = 1.1.7...

WordPress Llavero.io plugin <= 0.1.4 - Unauthenticated Blind SQLi vulnerability

Unauthenticated Blind SQLi vulnerability discovered by RIA Labs in WordPress Plugin Llavero.io versions = 0.1.4...

WordPress Social Web Suite plugin <= 4.1.12 - Unauthenticated Blind SQLi vulnerability

Unauthenticated Blind SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Social Web Suite versions = 4.1.12...

WordPress KeyWord Collector plugin <= 1.4 - Unauthenticated Stored XSS and Settings Update vulnerability

Unauthenticated Stored XSS and Settings Update vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin KeyWord Collector versions = 1.4...

WordPress Topcontent plugin <= 1.2.1 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Topcontent versions = 1.2.1...

WordPress Site Setup Wizard plugin <= 1.5.8 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin Site Setup Wizard versions = 1.5.8...

WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by cazy in WordPress Plugin Paid Videochat Turnkey Site versions = 7.5.13...

WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by myhappyhoon in WordPress Plugin Booktics versions = 1.0.28...