52658 matches found
WordPress Portfolio Filter Gallery plugin 2.0.2-2.2.0 - Contributor+ Cross-User Video Thumbnail Deletion vulnerability
Contributor+ Cross-User Video Thumbnail Deletion vulnerability discovered by blast in WordPress Plugin Portfolio Gallery – Image Gallery Plugin versions 2.0.2-2.2.0...
WordPress Contest Gallery plugin < 33.0.1 - Unauthenticated Email Verification Bypass vulnerability
Unauthenticated Email Verification Bypass vulnerability discovered by Akshat Parikh SN1PER in WordPress Plugin Contest Gallery versions 33.0.1...
WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetEngine versions = 3.8.16...
WordPress Push Notification for Post and BuddyPress plugin <= 3.23 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Push Notification for Post and BuddyPress versions = 3.23...
WordPress Auction Nudge – Your eBay on Your Site plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by AndrewN in WordPress Plugin Auction Nudge – Your eBay on Your Site versions = 8.4.0...
WordPress Easy Property Listings plugin <= 3.5.25 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Mor Golan in WordPress Plugin Easy Property Listings versions = 3.5.25...
WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Paid Videochat Turnkey Site versions = 7.5.12...
WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by AndrewN in WordPress Plugin Affiliates versions = 7.0.1...
WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Bus Ticket Booking with Seat Reservation versions = 5.9.7...
WordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by jydae in WordPress Plugin JetProductTables versions = 1.2.4...
WordPress Broadcast Live Video plugin <= 7.3.2 - Session Hijacking vulnerability
Session Hijacking vulnerability discovered by Peter Tang in WordPress Plugin Broadcast Live Video versions = 7.3.2...
WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Đỗ Trung Kiên in WordPress Plugin Frontend Dashboard versions = 3.0.7...
WordPress WP w3all phpBB plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Peter Tang in WordPress Plugin WP w3all phpBB versions = 3.1.0...
WordPress Marin theme <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Theme Marin versions = 0.1.1...
WordPress SureCart plugin <= 4.9.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin SureCart versions = 4.9.3...
WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SureCart versions = 4.9.3...
WordPress Polylang plugin <= 3.8.9 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Polylang versions = 3.8.9...
WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nguyen Viet Tin in WordPress Plugin WP OAuth Server versions = 6.4.0...
WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Aarush Gaur in WordPress Plugin Modern Events Calendar Lite versions 7.37.0...
WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin JetFormBuilder versions = 3.6.6...
WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability
Content Injection vulnerability discovered by cazy in WordPress Plugin Email Template Customizer for WooCommerce versions = 1.3.4...
WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Ad Inserter versions = 2.8.18...
WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetMenu versions = 3.0.5...
WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetElements For Elementor versions = 2.9.2.3...
WordPress Flexible Subscriptions plugin <= 1.8.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ivan in WordPress Plugin Flexible Subscriptions versions = 1.8.4...
WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Atia Avela in WordPress Plugin WP User Manager versions = 2.9.22...
WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Edge Decor versions = 2.9...
WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme EmojiNation versions = 1.0.12...
WordPress Products Restricted Users for WooCommerce plugin <= 0.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Oly Hossen in WordPress Plugin Products Restricted Users for WooCommerce versions = 0.7...
WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Gamezone versions = 1.1.11...
WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Avventure versions = 1.1.12...
WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Bonbon versions = 1.11...
WordPress Custom Query Blocks plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Custom Query Blocks versions = 5.6.0...
WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Coinpress versions = 1.0.15...
WordPress Booster Elite for WooCommerce plugin < 8.4.0 - Authenticated Arbitrary WordPress Option Disclosure vulnerability
Authenticated Arbitrary WordPress Option Disclosure vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Booster Elite for WooCommerce versions 8.4.0...
WordPress Event post plugin <= 6.1.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Event post versions = 6.1.1...
WordPress VideoWhisper Site Manager for ChatGPT, Claude, Codex plugin <= 1.2.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin VideoWhisper Site Manager for ChatGPT, Claude, Codex versions = 1.2.10...
WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Aarush Gaur in WordPress Plugin TMDS versions = 1.0.15...
WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerability
Other vulnerability Type vulnerability discovered by Erik Debye in WordPress Plugin Paid Videochat Turnkey Site versions = 7.5.12...
WordPress Event post plugin <= 6.1.1 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by genisis-lab in WordPress Plugin Event post versions = 6.1.1...
WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.22 - Other vulnerability Type vulnerability
Other vulnerability Type vulnerability discovered by Peter Tang in WordPress Plugin Flexible Quantity – Measurement Price Calculator for WooCommerce versions = 2.3.22...
WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Erik Debye in WordPress Plugin Paid Videochat Turnkey Site versions = 7.5.12...
WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Gamic versions = 1.19...
WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Good Homes versions = 1.3.13...
WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Gunslinger versions = 1.11...
WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Legal Stone versions = 1.2.11...
WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Le Truffe versions = 1.1.7...
WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Marcell versions = 1.2.14...