WordPress Teoro theme <= 1.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Teoro versions = 1.1...

WordPress Fabius theme <= 1.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Fabius versions = 1.0...

WordPress Kaven theme <= 1.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Kaven versions = 1.2...

WordPress Pin WP theme <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Pin WP versions = 7.0...

WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Avala versions = 1.1.4...

WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme WineShop versions = 3.20...

WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Equadio versions = 1.1.4...

WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Juno versions = 2.25...

WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme N7 | Golf Club Sports & Events versions = 2.21...

WordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Invetex versions = 2.18...

WordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Law Office versions = 3.20...

WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Peter Tang in WordPress Plugin Creator LMS versions = 1.2.21...

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Dthangws in WordPress Plugin rtMedia for WordPress, BuddyPress and bbPress versions = 4.7.13...

WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WooCommerce Multilingual & Multicurrency versions = 5.5.8...

WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by V1T in WordPress Plugin AFFI – Affiliate Marketing for WooCommerce versions = 1.0.10...

WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rasyid Abdi Gantoro in WordPress Plugin Tickera versions = 3.6.0.6...

WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability

Content Injection vulnerability discovered by cazy in WordPress Plugin Thank You Page Customizer for WooCommerce versions = 1.2.3...

WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dcs in WordPress Plugin GIFT4U versions = 1.1.3...

WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability

Shop Manager+ Privilege Escalation vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WooCommerce versions 9.8.0-11.1.2...

WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Jetpack VideoPress versions = 3.6...

WordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Asia Garden versions = 1.3.1...

WordPress Bayarcash WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Bayarcash WooCommerce versions = 4.4.2...

WordPress Volos theme <= 1.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Volos versions = 1.2...

WordPress Cardea theme <= 2.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Cardea versions = 2.3...

WordPress Ambed theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Ambed versions = 1.0.0...

WordPress ThemeStek Extras for LabtechCO Theme plugin <= 8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin ThemeStek Extras for LabtechCO Theme versions = 8.4...

WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Plugin Super Video Player versions = 1.8.14...

WordPress Wallet System for WooCommerce plugin < 2.8.0 - Subscriber+ Wallet Balance Manipulation vulnerability

Subscriber+ Wallet Balance Manipulation vulnerability discovered by Stefan Löwen CODE WHITE GmbH in WordPress Plugin Wallet System for WooCommerce versions 2.8.0...

WordPress Easy Digital Downloads plugin < 3.7.1 - Unauthenticated Account Creation with Registration Disabled vulnerability

Unauthenticated Account Creation with Registration Disabled vulnerability discovered by Rik de Kok in WordPress Plugin Easy Digital Downloads versions 3.7.1...

WordPress TutorStarter theme < 4.0.4 - Unauthenticated User Registration Bypass vulnerability

Unauthenticated User Registration Bypass vulnerability discovered by Alexander Jurkschat in WordPress Theme TutorStarter versions 4.0.4...

WordPress Airwallex Online Payments Gateway plugin < 1.36.0 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Pedro Pinho in WordPress Plugin Airwallex Online Payments Gateway versions 1.36.0...

WordPress WP Rollback plugin <= 3.1.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Rollback versions = 3.1.2...

WordPress Zotpress plugin <= 7.4.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Zotpress versions = 7.4.4...

WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Forminator versions = 1.57.3...

WordPress WPAdverts plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin WPAdverts versions = 2.3.4...

WordPress Tutor LMS plugin <= 4.1.1 - Race Condition vulnerability

Race Condition vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Tutor LMS versions = 4.1.2...

WordPress WPAdverts plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin WPAdverts versions = 2.3.4...

WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by John Ryan Albon in WordPress Plugin Booster for WooCommerce versions = 8.4.0...

WordPress WP plugin Info Card plugin <= 6.3.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin WP Plugin Info Card versions = 6.3.5...

WordPress Creator LMS plugin <= 1.2.21 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Creator LMS versions = 1.2.21...

WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by HOMEVO Adonis Orfel in WordPress Plugin Forminator versions = 1.57.3...

WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Tainacan versions = 1.3.0...

WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Slider by 10Web versions = 1.2.62...

WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Deva Parekh in WordPress Plugin MasterStudy LMS versions = 3.7.52...

WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Matthew Lapinski in WordPress Plugin Event Tickets versions = 5.30.0.1...

WordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by b1ue0cean in WordPress Plugin Forminator versions = 1.57.3...

WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dzeusking in WordPress Plugin Event Tickets versions = 5.30.0.1...

WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Gutenberg Blocks by Kadence Blocks versions = 3.7.12...

WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin VillaTheme Core versions = 1.0.5...

WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin Event Tickets versions = 5.30.0.1...