52703 matches found
WordPress WPAdverts plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin WPAdverts versions = 2.3.4...
WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by John Ryan Albon in WordPress Plugin Booster for WooCommerce versions = 8.4.0...
WordPress WP plugin Info Card plugin <= 6.3.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin WP Plugin Info Card versions = 6.3.5...
WordPress Creator LMS plugin <= 1.2.21 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Creator LMS versions = 1.2.21...
WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by HOMEVO Adonis Orfel in WordPress Plugin Forminator versions = 1.57.3...
WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Tainacan versions = 1.3.0...
WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Slider by 10Web versions = 1.2.62...
WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Deva Parekh in WordPress Plugin MasterStudy LMS versions = 3.7.52...
WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Matthew Lapinski in WordPress Plugin Event Tickets versions = 5.30.0.1...
WordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by b1ue0cean in WordPress Plugin Forminator versions = 1.57.3...
WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dzeusking in WordPress Plugin Event Tickets versions = 5.30.0.1...
WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Gutenberg Blocks by Kadence Blocks versions = 3.7.12...
WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin VillaTheme Core versions = 1.0.5...
WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin Event Tickets versions = 5.30.0.1...
WordPress WP Store Locator plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin WP Store Locator versions = 3.0.3...
WordPress Robo Gallery plugin <= 5.1.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Robo Gallery versions = 5.1.6...
WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Aarush Gaur in WordPress Plugin Visual Composer Website Builder versions = 45.16.3...
WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin ShortPixel Image Optimizer versions = 6.5.6...
WordPress GPTranslate plugin < 2.34.14 - Unauthenticated Stored XSS vulnerability
Unauthenticated Stored XSS vulnerability discovered by Guntur Wahyu Ramadhan in WordPress Plugin GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites versions 2.34.14...
WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin Ultimate Post Kit versions = 4.5.5...
WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Peter Tang in WordPress Plugin Vitepos versions = 3.6.1...
WordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Filip Kowalski in WordPress Plugin WP 2FA versions = 4.1.0...
WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin YITH WooCommerce Product Bundles versions = 2.29.0...
WordPress HollerBox plugin <= 2.3.14 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by benzdeus in WordPress Plugin HollerBox versions = 2.3.14...
WordPress Ultimate Multisite plugin < 2.17.0 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by Erwan LR WPScan in WordPress Plugin Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform versions 2.17.0...
WordPress WPComplete plugin <= 2.9.5.6 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Asim Alshaya in WordPress Plugin WPComplete versions = 2.9.5.6...
WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Enis Getmez in WordPress Plugin GiveWP versions = 4.18.0...
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Phat RiO in WordPress Plugin YITH WooCommerce Product Add-Ons versions = 4.34.0...
WordPress Wallet System for WooCommerce plugin < 2.8.0 - Subscriber+ Arbitrary Wallet Balance Theft vulnerability
Subscriber+ Arbitrary Wallet Balance Theft vulnerability discovered by Stefan Spasic in WordPress Plugin Wallet System for WooCommerce versions 2.8.0...
WordPress Wallet System for WooCommerce plugin < 2.8.0 - Subscriber+ Forged Wallet Withdrawal Request vulnerability
Subscriber+ Forged Wallet Withdrawal Request vulnerability discovered by Mytears in WordPress Plugin Wallet System for WooCommerce versions 2.8.0...
WordPress Track Orders for WooCommerce plugin < 1.2.7 - Unauthenticated PII Disclosure vulnerability
Unauthenticated PII Disclosure vulnerability discovered by Pedro Pinho in WordPress Plugin Track Orders for WooCommerce versions 1.2.7...
WordPress BackWPup plugin < 5.7.7 - Unauthenticated Sensitive Data Disclosure vulnerability
Unauthenticated Sensitive Data Disclosure vulnerability discovered by Philipp Doblhofer in WordPress Plugin BackWPup versions 5.7.7...
WordPress Frontend Dashboard plugin 3.0.0-3.0.4 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Ryan Fabella in WordPress Plugin Frontend Dashboard versions 3.0.0-3.0.4...
WordPress Sell Downloads plugin <= 1.2.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by c4st1e in WordPress Plugin Sell Downloads versions = 1.2.3...
WordPress Presto Player Pro plugin <= 3.0.1 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Presto Player Pro versions = 3.0.1...
WordPress Zeinet theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Zeinet versions = 1.0.0...
WordPress Kicker theme <= 2.2.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Kicker versions = 2.2.1...
WordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme FC United versions = 1.1.1...
WordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Jacqueline versions = 2.22...
WordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Alliance versions = 3.11...
WordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme ShiftCV versions = 3.0.14...
WordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Windsor versions = 2.10...
WordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Education Center versions = 3.6.12...
WordPress Qwery theme <= 3.6.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Qwery versions = 3.6.1...
WordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Anesta versions = 1.5.3...
WordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Booklovers versions = 2.13.0...
WordPress Drone Media theme <= 2.2.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Drone Media versions = 2.2.0...
WordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Gutentype versions = 2.1.12...