49933 matches found
WordPress Charitable plugin <= 1.8.12.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Noman Riffat in WordPress Plugin Charitable versions = 1.8.12.1...
WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Gabriel Tanaka in WordPress Plugin RegistrationMagic versions = 6.0.9.8...
WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by she11f in WordPress Plugin Print Barcode Labels for your WooCommerce products/orders versions = 4.0.0...
WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Kalles Addons versions = 1.0.6...
WordPress Really Simple Security plugin < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation vulnerability
Multisite Subsite Admin+ Arbitrary Plugin Installation vulnerability discovered by Charles Vosburgh in WordPress Plugin Really Simple SSL versions 9.8.0...
WordPress HEL Online Classroom: AI-powered Online Classrooms plugin <= 1.0.3 - Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass vulnerability
Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass vulnerability discovered by kimsunghoon in WordPress Plugin HEL Online Classroom: AI-powered Online Classrooms versions = 1.0.3...
WordPress MStore API plugin < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass vulnerability
Subscriber+ Arbitrary Order Payment Bypass vulnerability discovered by Erwan LR WPScan in WordPress Plugin MStore API versions 4.21.1...
WordPress MapSVG plugin <= 8.15.0 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Adam Kahlon Adkali in WordPress Plugin MapSVG versions = 8.15.0...
WordPress 爱采集数据采集和发布插件 plugin <= 1.0.0 - Unauthenticated User and Term Creation vulnerability
Unauthenticated User and Term Creation vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin 爱采集数据采集和发布插件 versions = 1.0.0...
WordPress WPvivid — Backup, Migration & Staging plugin < 0.9.133 - Admin+ Arbitrary File Write vulnerability
Admin+ Arbitrary File Write vulnerability discovered by Nir Yehoshua in WordPress Plugin WPvivid Backup and Migration versions 0.9.133...
WordPress MW WP Form plugin < 5.1.6 - Editor+ Stored XSS vulnerability
Editor+ Stored XSS vulnerability discovered by Sai Praneeth Koti in WordPress Plugin MW WP Form versions 5.1.6...
WordPress SOGO Add Script to Individual Pages Header Footer plugin <= 3.9 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Chamseddine Bouzaiene in WordPress Plugin SOGO Add Script to Individual Pages Header Footer versions = 3.9...
WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.43 - Unauthenticated Open Redirect vulnerability
Unauthenticated Open Redirect vulnerability discovered by Abiodun Victor in WordPress Plugin MasterStudy LMS versions 3.7.43...
WordPress Stripe Payment Forms by WP Full Pay plugin < 8.5.5 - Cross-Customer Subscription Cancellation vulnerability
Cross-Customer Subscription Cancellation vulnerability discovered by Farid Narimanov in WordPress Plugin WP Full Stripe Free versions 8.5.5...
WordPress WP Ultimate CSV Importer plugin < 9.0 - Admin+ SQLi vulnerability
Admin+ SQLi vulnerability discovered by Jaan Buerms in WordPress Plugin WP Ultimate CSV Importer versions 9.0...
WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.42 - Instructor+ Cross-Tenant Order Billing PII Disclosure vulnerability
Instructor+ Cross-Tenant Order Billing PII Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin MasterStudy LMS versions 3.7.42...
WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.40 - Unauthenticated Payment Bypass vulnerability
Unauthenticated Payment Bypass vulnerability discovered by Abdullah Kareem in WordPress Plugin MasterStudy LMS versions 3.7.40...
WordPress HEL Online Classroom: AI-powered Online Classrooms plugin <= 1.0.3 - Unauthenticated Plugin Settings Update vulnerability
Unauthenticated Plugin Settings Update vulnerability discovered by kimsunghoon in WordPress Plugin HEL Online Classroom: AI-powered Online Classrooms versions = 1.0.3...
WordPress Rank Math SEO plugin < 1.0.277 - Editor+ Core Settings Modification vulnerability
Editor+ Core Settings Modification vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin Rank Math SEO versions 1.0.277...
WordPress Booking for Appointments and Events Calendar plugin 1.2.32-2.4.8 - Amelia Customer+ Appointment Status Update and Self-Approval vulnerability
Amelia Customer+ Appointment Status Update and Self-Approval vulnerability discovered by Louise in WordPress Plugin Amelia versions 1.2.32-2.4.8...
WordPress HEL Online Classroom: AI-powered Online Classrooms plugin <= 1.0.3 - Unauthenticated BigBlueButton API Secret Disclosure vulnerability
Unauthenticated BigBlueButton API Secret Disclosure vulnerability discovered by kimsunghoon in WordPress Plugin HEL Online Classroom: AI-powered Online Classrooms versions = 1.0.3...
WordPress Appointment Booking Calendar Plugin and Scheduling Plugin plugin 1.5.6-1.6.2 - Unauthenticated Booking Price Manipulation vulnerability
Unauthenticated Booking Price Manipulation vulnerability discovered by Nguyen Phuoc Thinh - HPT Vietnam Corporation in WordPress Plugin BookingPress versions 1.5.6-1.6.2...
WordPress Catfolders Document Gallery Pro plugin < 2.0.7 - Unauthenticated Missing Authorization vulnerability
Unauthenticated Missing Authorization vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Catfolders Document Gallery Pro versions 2.0.7...
WordPress User Profile Builder plugin < 4.0.1 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Profile Builder versions 4.0.1...
WordPress User Profile Builder plugin < 4.0.1 - Admin+ PHP Object Injection vulnerability
Admin+ PHP Object Injection vulnerability discovered by Vivien LEBAS in WordPress Plugin Profile Builder versions 4.0.1...
WordPress Newsletters plugin < 4.17 - Arbitrary Plugin Option Update vulnerability
Arbitrary Plugin Option Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin Newsletters versions 4.17...
WordPress MStore API plugin < 4.21.1 - Subscriber+ Arbitrary Order Completion vulnerability
Subscriber+ Arbitrary Order Completion vulnerability discovered by Erwan LR WPScan in WordPress Plugin MStore API versions 4.21.1...
WordPress SmartAIPress plugin <= 1.2.0 - Subscriber+ Server-Side Request Forgery vulnerability
Subscriber+ Server-Side Request Forgery vulnerability discovered by Benjamin Aguayo in WordPress Plugin SmartAIPress versions = 1.2.0...
WordPress Newsletters plugin < 4.17 - Unauthenticated API Access vulnerability
Unauthenticated API Access vulnerability discovered by Erwan LR WPScan in WordPress Plugin Newsletters versions 4.17...
NPM: MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets
NPM: MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets vulnerability discovered by ? in WordPress Npm mariadb versions 3.2.4...
NPM: MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials
NPM: MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials vulnerability discovered by ? in WordPress Npm mariadb versions 3.2.4...
NPM: MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`
NPM: MariaDB's connector leaks the cleartext password to an MitM despite ssl: true vulnerability discovered by ? in WordPress Npm mariadb versions 3.2.4...
NPM: 9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF
NPM: 9router: Unauthenticated /v1 proxy access via Host-header spoofing → open AI relay + SSRF vulnerability discovered by ? in WordPress Npm 9router versions 0.5.2...
NPM: 9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass
NPM: 9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass vulnerability discovered by ? in WordPress Npm 9router versions 0.5.2...
WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability
SQL Injection vulnerability discovered by sequenceX0 in WordPress Plugin WP Data Access versions = 5.5.81...
WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Forms Pro Add On Pack versions = 6.2.12...
WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Forms Pro Add On Pack versions = 6.2.12...
WordPress LeadConnector plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin LeadConnector versions = 4.0.5...
WordPress SliceWP plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin SliceWP versions = 1.2.10...
WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Emiliano Carrizo in WordPress Plugin RegistrationMagic versions = 6.0.9.8...
WordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.1.24 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Smart Marketing SMS and Newsletters Forms versions = 5.1.24...
WordPress OwnerRez API plugin <= 1.2.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by JunHee CHO in WordPress Plugin OwnerRez API versions = 1.2.6...
WordPress Booking and Rental Manager plugin <= 2.7.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin Booking and Rental Manager versions = 2.7.6...
WordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ionut Pipirig in WordPress Plugin Tickera versions = 3.6.0.2...
WordPress Email Essentials plugin <= 6.0.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by JunHee CHO in WordPress Plugin Email Essentials versions = 6.0.6...
WordPress Tailored Tools plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Tailored Tools versions = 3.0.2...
WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Super Store Finder versions = 7.10...
WordPress SiteGround Security plugin <= 1.6.6 - 2FA Bypass vulnerability
2FA Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SiteGround Security versions = 1.6.6...
WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WordPress Social Login and Register versions = 7.8.2...