WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Element Pack Elementor Addons versions = 8.8.8...

WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Broadcast Live Video versions = 7.3.6...

WordPress paymendo plugin <= 1.1 - Subscriber+ SQLi vulnerability

Subscriber+ SQLi vulnerability discovered by Erwan LR WPScan in WordPress Plugin paymendo versions = 1.1...

WordPress paymendo plugin <= 1.1 - Unauthenticated Blind SQLi vulnerability

Unauthenticated Blind SQLi vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin paymendo versions = 1.1...

WordPress Post Voting System plugin <= 1.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Post Voting System versions = 1.0...

WordPress WP Verify API plugin <= 1.0.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by RIA Labs in WordPress Plugin WP Verify API versions = 1.0.0...

WordPress Loja Automática plugin <= 1.0.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Loja Automática versions = 1.0.0...

WordPress ASPL Product Quotation plugin <= 1.1.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin ASPL Product Quotation versions = 1.1.0...

WordPress WP Posts Password Batch Manager plugin <= 1.1 - Unauthenticated Bulk Post Password Rewrite vulnerability

Unauthenticated Bulk Post Password Rewrite vulnerability discovered by Naoki Kawahigashi in WordPress Plugin WP Posts Password Batch Manager versions = 1.1...

WordPress WP-Partner plugin <= 1.2.1 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Raúl Conesa in WordPress Plugin WP-Partner versions = 1.2.1...

WordPress WpCues Basic Quiz plugin <= 1.6.5 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin WpCues Basic Quiz versions = 1.6.5...

WordPress Recordbrowser plugin <= 1.1.7 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Theo Antonio da Fonseca in WordPress Plugin Recordbrowser versions = 1.1.7...

WordPress Llavero.io plugin <= 0.1.4 - Unauthenticated Blind SQLi vulnerability

Unauthenticated Blind SQLi vulnerability discovered by RIA Labs in WordPress Plugin Llavero.io versions = 0.1.4...

WordPress Social Web Suite plugin <= 4.1.12 - Unauthenticated Blind SQLi vulnerability

Unauthenticated Blind SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Social Web Suite versions = 4.1.12...

WordPress KeyWord Collector plugin <= 1.4 - Unauthenticated Stored XSS and Settings Update vulnerability

Unauthenticated Stored XSS and Settings Update vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin KeyWord Collector versions = 1.4...

WordPress Topcontent plugin <= 1.2.1 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Topcontent versions = 1.2.1...

WordPress Site Setup Wizard plugin <= 1.5.8 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin Site Setup Wizard versions = 1.5.8...

WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by cazy in WordPress Plugin Paid Videochat Turnkey Site versions = 7.5.13...

WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by myhappyhoon in WordPress Plugin Booktics versions = 1.0.28...

WordPress Disable Users plugin <= 1.0.5 - Disabled Account Authentication Bypass vulnerability

Disabled Account Authentication Bypass vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Disable Users versions = 1.0.5...

WordPress SmugMug Embed plugin <= 3.13 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin SmugMug Embed versions = 3.13...

WordPress BuddyPress Instant Chat plugin <= 1.6 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin BuddyPress Instant Chat versions = 1.6...

WordPress Adwised Web Push Notification plugin <= 2.5.7 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Adwised Web Push Notification versions = 2.5.7...

WordPress Adwised Web Push Notification plugin <= 2.5.7 - Subscriber+ Stored XSS vulnerability

Subscriber+ Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Adwised Web Push Notification versions = 2.5.7...

WordPress Web Vitals Tracking plugin <= 5.4.2 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Web Vitals Tracking versions = 5.4.2...

WordPress HootBoard plugin <= 3.1.4 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin HootBoard versions = 3.1.4...

WordPress Insurify plugin <= 1.0 - Unauthenticated Arbitrary Option Deletion vulnerability

Unauthenticated Arbitrary Option Deletion vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Insurify versions = 1.0...

WordPress Quick quotes plugin <= 1.0.0 - Unauthenticated Integer-Value Option Update vulnerability

Unauthenticated Integer-Value Option Update vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Quick quotes versions = 1.0.0...

WordPress Crowdfundly plugin <= 2.2.2 - Crowdfundly Manager+ Privilege Escalation vulnerability

Crowdfundly Manager+ Privilege Escalation vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Crowdfundly versions = 2.2.2...

WordPress Insurify plugin <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite vulnerability

Unauthenticated Arbitrary Option Creation and Overwrite vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Insurify versions = 1.0...

WordPress AI Content Generator Marketing plugin <= 1.0.0 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin AI Content Generator Marketing versions = 1.0.0...

WordPress Freeton WP plugin <= 1.0.0 - Unauthenticated Account Takeover vulnerability

Unauthenticated Account Takeover vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Freeton WP versions = 1.0.0...

WordPress Mindstien Quick Login plugin <= 1.0 - Unauthenticated Administrator Account Takeover vulnerability

Unauthenticated Administrator Account Takeover vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Mindstien Quick Login versions = 1.0...

WordPress click5 CRM add-on to Contact Form 7 plugin <= 1.0.4 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Erwan LR WPScan in WordPress Plugin click5 CRM add-on to Contact Form 7 versions = 1.0.4...

WordPress click5 CRM add-on to Gravity Forms plugin <= 1.0.3 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Erwan LR WPScan in WordPress Plugin click5 CRM add-on to Gravity Forms versions = 1.0.3...

WordPress click5 CRM add-on to WPForms plugin <= 1.0.3 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Erwan LR WPScan in WordPress Plugin click5 CRM add-on to WPForms versions = 1.0.3...

WordPress click5 CRM add-on to Ninja Forms plugin <= 1.0.1 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Erwan LR WPScan in WordPress Plugin click5 CRM add-on to Ninja Forms versions = 1.0.1...

WordPress click5 CRM add-on to Contact Form 7 plugin <= 1.0.4 - Unauthenticated Arbitrary Options Update vulnerability

Unauthenticated Arbitrary Options Update vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin click5 CRM add-on to Contact Form 7 versions = 1.0.4...

WordPress click5 CRM add-on to WPForms plugin <= 1.0.3 - Unauthenticated Arbitrary Options Update vulnerability

Unauthenticated Arbitrary Options Update vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin click5 CRM add-on to WPForms versions = 1.0.3...

WordPress click5 CRM add-on to Ninja Forms plugin <= 1.0.1 - Unauthenticated Arbitrary Options Update vulnerability

Unauthenticated Arbitrary Options Update vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin click5 CRM add-on to Ninja Forms versions = 1.0.1...

WordPress Fundiin cho WooCommerce plugin <= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Credential Disclosure vulnerability

Unauthenticated Payment Gateway Settings Update and Credential Disclosure vulnerability discovered by ? in WordPress Plugin Fundiin cho WooCommerce versions = 3.4.0...

WordPress Tcard WP plugin <= 1.8.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Theo Antonio da Fonseca in WordPress Plugin Tcard WP versions = 1.8.0...

WordPress WeddingCity Lite plugin <= 1.0.4 - Unauthenticated Arbitrary Post and Attachment Deletion vulnerability

Unauthenticated Arbitrary Post and Attachment Deletion vulnerability discovered by Naoki Kawahigashi in WordPress Plugin WeddingCity Lite versions = 1.0.4...

WordPress Envira Gallery plugin < 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installation vulnerability

Multisite Subsite Admin+ Arbitrary Plugin Installation vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Envira Photo Gallery versions 1.16.2...

WordPress Anton Extensions plugin <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCE vulnerability

Unauthenticated Arbitrary File Upload to RCE vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Anton Extensions versions = 1.2.2...

WordPress Mobile builder plugin <= 1.4.2 - Subscriber+ Privilege Escalation to Admin vulnerability

Subscriber+ Privilege Escalation to Admin vulnerability discovered by Raphael P. Cigana in WordPress Plugin Mobile builder versions = 1.4.2...

WordPress Mobile builder plugin <= 1.4.2 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Raphael P. Cigana in WordPress Plugin Mobile builder versions = 1.4.2...

WordPress Prenotazioni plugin <= 1.7.5 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Enrico Marcolini, Claudio Marchesini, Dottor Marc in WordPress Plugin Prenotazioni versions = 1.7.5...

WordPress LTL Freight Quotes plugin < 4.2.19 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by achmad sonif in WordPress Plugin LTL Freight Quotes – Old Dominion Edition versions 4.2.19...

WordPress LTL Freight Quotes plugin 4.2.11-4.2.18 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by achmad sonif in WordPress Plugin LTL Freight Quotes – Old Dominion Edition versions 4.2.11-4.2.18...