53406 matches found
WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ayukiab in WordPress Plugin Fluent CRM versions = 3.2.6...
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by yzx001 in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 2.0.26...
WordPress BookIt plugin <= 2.6.0.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by cazy in WordPress Plugin BookIt versions = 2.6.0.6...
WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by awebitaL in WordPress Plugin Event Tickets versions = 5.30.2...
WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by HAIMIN in WordPress Plugin Booktics versions = 1.0.31...
WordPress Ultimate Addons for Elementor - Lite plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability
WordPress Ultimate Addons for Elementor - Lite plugin = 2.9.5 - Cross Site Scripting XSS vulnerability discovered by fccsec.dev in WordPress Plugin Ultimate Addons for Elementor - Lite versions = 2.9.5...
WordPress GIFTiT – Free Gifts for WooCommerce plugin <= 4.5 - Content Injection vulnerability
Content Injection vulnerability discovered by Nguyen Quang Tan in WordPress Plugin GIFTiT Free Gifts for WooCommerce versions = 4.5...
WordPress Divi Contact Form 7 plugin <= 4.1.0 - Content Injection vulnerability
Content Injection vulnerability discovered by neurotx in WordPress Plugin Divi Contact Form 7 versions = 4.1.0...
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Siyang Wu in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 2.0.26...
WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by hera-user in WordPress Plugin Booktics versions = 1.0.31...
WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Oly Hossen in WordPress Plugin APIExperts Square for WooCommerce versions = 4.7.5...
WordPress AI Engine plugin <= 3.8.8 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by AndrewN in WordPress Plugin AI Engine versions = 3.8.8...
WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Elieve in WordPress Plugin Event Tickets versions = 5.30.2...
WordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ihsan Saddan in WordPress Plugin Media Player Addons for Elementor – Media Player widget for WP versions = 1.1.10...
WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by fccsec.dev in WordPress Plugin The Events Calendar versions = 6.18.2...
WordPress Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin <= 3.7.2 - Unauthenticated Authentication Bypass to Administrator Account Takeover vulnerability
Unauthenticated Authentication Bypass to Administrator Account Takeover vulnerability discovered by Yuto Hyakumoto in WordPress Plugin Easy Digital Downloads versions = 3.7.2...
WordPress Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter vulnerability
Unauthenticated Privilege Escalation to 'pageid' Parameter vulnerability discovered by crow in WordPress Plugin Essential Addons for Elementor versions = 6.8.7...
WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by nizar yart D3dC0d in WordPress Plugin Fluent CRM versions = 3.2.6...
WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability
Content Injection vulnerability discovered by Askar in WordPress Plugin JetFormBuilder versions = 3.6.7.1...
WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by fccsec.dev in WordPress Plugin The Events Calendar versions = 6.18.2...
WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ganesh m in WordPress Plugin Webba Booking versions = 6.5.4...
WordPress Redux Framework plugin <= 4.5.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan in WordPress Plugin Redux Framework versions = 4.5.15...
WordPress Email Customizer for WooCommerce (Pro) plugin <= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution vulnerability
Authenticated Subscriber+ Remote Code Execution vulnerability discovered by theviper17y in WordPress Plugin Email Customizer for WooCommerce Pro versions = 3.9.5...
WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by ngvuthdanh in WordPress Plugin The Events Calendar versions = 6.18.2...
WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Anatoly Gorbounov x1will in WordPress Plugin JetFormBuilder versions = 3.6.7.1...
WordPress Modern Events Calendar Lite plugin < 7.36.4 - Subscriber+ Arbitrary Post Modification vulnerability
Subscriber+ Arbitrary Post Modification vulnerability discovered by Nguyen Duc Thinh in WordPress Plugin Modern Events Calendar Lite versions 7.36.4...
WordPress OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWA plugin <= 1.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Placement Modification and Entity Metadata Disclosure vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary Placement Modification and Entity Metadata Disclosure vulnerability discovered by Wordfence PRISM, OpenStation Team in WordPress Plugin Desktop Mode versions = 1.1.16...
WordPress Timetics plugin <= 1.0.65 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by HAIMIN in WordPress Plugin Timetics versions = 1.0.65...
WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by fccsec.dev in WordPress Plugin The Events Calendar versions = 6.18.2...
WordPress Blocksy Companion plugin <= 2.1.60 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dzaku in WordPress Plugin Blocksy Companion versions = 2.1.60...
WordPress Enable Media Replace plugin 4.1.4-4.2.2 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability discovered by Jakub Herman in WordPress Plugin Enable Media Replace versions 4.1.4-4.2.2...
WordPress WP Visitor Statistics (Real Time Traffic) plugin < 8.8 - Unauthenticated Stored XSS vulnerability
Unauthenticated Stored XSS vulnerability discovered by an7ln in WordPress Plugin WP Visitor Statistics Real Time Traffic versions 8.8...
WordPress User Frontend plugin < 4.3.14 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Jasper Weijts in WordPress Plugin WP User Frontend versions 4.3.14...
WordPress Security Plugin, Firewall & Malware Scanner with Auto Removal plugin < 2.191 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by Karthik in WordPress Plugin Security & Malware scan by CleanTalk versions 2.191...
WordPress BuddyForms plugin < 2.10.1 - Subscriber+ Arbitrary Post Modification vulnerability
Subscriber+ Arbitrary Post Modification vulnerability discovered by Furkan Arslan in WordPress Plugin BuddyForms versions 2.10.1...
WordPress BuddyForms plugin < 2.10.3 - Unauthenticated Form Configuration Disclosure vulnerability
Unauthenticated Form Configuration Disclosure vulnerability discovered by Ryan Fabella in WordPress Plugin BuddyForms versions 2.10.3...
WordPress Firelight Lightbox plugin < 2.3.23 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Firelight Lightbox versions 2.3.23...
WordPress WP Visitor Statistics (Real Time Traffic) plugin < 8.8 - Admin+ SQLi vulnerability
Admin+ SQLi vulnerability discovered by Enrico Marcolini, Claudio Marchesini, Dottor Marc in WordPress Plugin WP Visitor Statistics Real Time Traffic versions 8.8...
WordPress Fraud Prevention For WooCommerce and EDD plugin < 2.3.6 - Subscriber+ Arbitrary Customer Blacklisting vulnerability
Subscriber+ Arbitrary Customer Blacklisting vulnerability discovered by Usama Arshad in WordPress Plugin Fraud Prevention For Woocommerce versions 2.3.6...
WordPress Joinchat plugin 6.3.2-6.4.1 - Author+ Stored XSS vulnerability
Author+ Stored XSS vulnerability discovered by Qi Qin in WordPress Plugin Joinchat versions 6.3.2-6.4.1...
WordPress Gravity Forms plugin <= 3.1.1 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by daroo in WordPress Plugin Gravity Forms versions = 3.1.1...
WordPress Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin <= 6.35 - Authenticated (Subscriber+) Arbitrary Plugin Installation vulnerability
Authenticated Subscriber+ Arbitrary Plugin Installation vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Formidable Forms versions = 6.35...
WordPress Gravity Forms plugin <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Gravity Forms versions = 3.1.2...
WordPress Gravity Forms plugin <= 3.1.2 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability discovered by Tin Pham TF1T, Hao Ngo, Trong Pham in WordPress Plugin Gravity Forms versions = 3.1.2...
WordPress Food Store – Online Food Delivery & Pickup plugin <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by GivMeInJ in WordPress Plugin Food Store – Online Food Delivery & Pickup versions = 1.5.5...
WordPress AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini plugin <= 3.8.6 - Missing Authorization to Administrator Account Takeover vulnerability
Missing Authorization to Administrator Account Takeover vulnerability discovered by satoshigpt2021-sketch in WordPress Plugin AI Engine versions = 3.8.6...
WordPress Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin <= 1.55.0.2 - Unauthenticated Limited File Deletion vulnerability
Unauthenticated Limited File Deletion vulnerability discovered by Emiliano Versini in WordPress Plugin Forminator versions = 1.55.0.2...
WordPress Export and Import Users and Customers plugin <= 2.7.5 - Authenticated (Subscriber+) Privilege Escalation vulnerability
Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Sebastian Albrecht mySebbe in WordPress Plugin Import Export WordPress Users versions = 2.7.5...
WordPress Content Egg – Affiliate Product Importer & Price Comparison plugin <= 12.0.0 - Missing Authorization to Authenticated (Author+) Administrator-Authored Post Creation vulnerability
Missing Authorization to Authenticated Author+ Administrator-Authored Post Creation vulnerability discovered by Wordfence PRISM in WordPress Plugin Content Egg versions = 12.0.0...
WordPress Cool FormKit Lite – Advanced Form Builder for Elementor plugin <= 2.7.9 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Cool Formkit Lite versions = 2.7.9...