53460 matches found
WordPress Avada | Website Builder For WordPress & WooCommerce theme <= 7.16.2 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by Muhamad Visat in WordPress Theme Avada versions = 7.16.2...
WordPress FV Flowplayer Video Player plugin <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by satoshigpt2021-sketch in WordPress Plugin FV Flowplayer Video Player versions = 7.5.55.7212...
WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin <= 4.4.1 - Authenticated (Custom+) Local File Inclusion vulnerability
Authenticated Custom+ Local File Inclusion vulnerability discovered by khanhnv in WordPress Plugin NextGEN Gallery versions = 4.4.1...
WordPress User Submitted Posts – Enable Users to Submit Posts from the Front End plugin <= 20260916 - Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability discovered by UKO in WordPress Plugin User Submitted Posts versions = 20260916...
WordPress W3 Total Cache plugin <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Santh in WordPress Plugin W3 Total Cache versions = 2.10.7...
WordPress PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution vulnerability
Unauthenticated PHP Object Injection to Remote Code Execution vulnerability discovered by Osman Hussein in WordPress Plugin PDF Invoice Builder for WooCommerce versions = 7.1.1...
WordPress ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin <= 1.17.10 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by rpgsec in WordPress Plugin WP ERP versions = 1.17.10...
WordPress PDF Invoices & Packing Slips for WooCommerce plugin <= 5.16.4 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by churchill11 in WordPress Plugin WooCommerce PDF Invoices & Packing Slips versions = 5.16.4...
WordPress Welcart e-Commerce plugin <= 2.12.5 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Sawyer in WordPress Plugin Welcart e-Commerce versions = 2.12.5...
WordPress W3 Total Cache plugin <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Santh in WordPress Plugin W3 Total Cache versions = 2.10.7...
WordPress Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin <= 22.3.2 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Kevin Whelan in WordPress Plugin Shield Security versions = 22.3.2...
WordPress Spectra Legacy – Gutenberg Blocks plugin <= 2.20.4 - Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification vulnerability
Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification vulnerability discovered by AlexHenry in WordPress Plugin Spectra versions = 2.20.4...
WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by Kuba in WordPress Plugin Uncanny Toolkit for LearnDash versions = 3.8.2...
WordPress User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation vulnerability
Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Kuba in WordPress Plugin WP User Frontend versions = 4.3.13...
WordPress Wp Social Login and Register Social Counter plugin <= 3.2.2 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by Kumar Atul Mandarin21 in WordPress Plugin Wp Social versions = 3.2.2...
WordPress Content Pilot – Autoblogging & Affiliate Marketing Suite plugin <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin WP Content Pilot versions = 2.2.4...
WordPress easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution plugin <= 2.8.4 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by poiri3r in WordPress Plugin EasyJobs versions = 2.8.4...
WordPress User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin <= 4.3.13 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Dthangws in WordPress Plugin WP User Frontend versions = 4.3.13...
WordPress Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin <= 4.1.1 - Unauthenticated Remote Code Execution vulnerability
Unauthenticated Remote Code Execution vulnerability discovered by Osman Hussein in WordPress Plugin WP Project Manager versions = 4.1.1...
WordPress Redux Framework plugin <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
Missing Authorization to Authenticated Subscriber+ Sensitive Information Disclosure vulnerability discovered by Kuba in WordPress Plugin Redux Framework versions = 4.5.15...
WordPress WPO365 | MICROSOFT 365 GRAPH MAILER plugin <= 6.2 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Nick Verhelle Bulldawg in WordPress Plugin WPO365 | MICROSOFT 365 GRAPH MAILER versions = 6.2...
WordPress WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin <= 5.5.88 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability
Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Kuba in WordPress Plugin WP Data Access versions = 5.5.88...
WordPress SEOPress – AI SEO Plugin & On-site SEO plugin <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Yuto Hyakumoto in WordPress Plugin SEOPress versions = 10.3...
WordPress WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden plugin <= 3.5.6 - Authenticated (Subscriber+) SQL Injection vulnerability
Authenticated Subscriber+ SQL Injection vulnerability discovered by Peter Thaleikis in WordPress Plugin WP2LEADS versions = 3.5.6...
WordPress Rox Appointment Booking – Event, Calendar & Appointment Scheduling plugin <= 1.3.1 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Daryle Minor in WordPress Plugin Rox Appointment Booking Appointment Booking Scheduling Solution versions = 1.3.1...
WordPress Product Filter for WooCommerce by WBW plugin <= 3.4.6 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by crow in WordPress Plugin Product Filter by WBW versions = 3.4.6...
WordPress UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin <= 1.2.78 - Unauthenticated Account Access vulnerability
Unauthenticated Account Access vulnerability discovered by Kuba in WordPress Plugin UsersWP versions = 1.2.78...
WordPress Mail logging & Catcher plugin <= 2.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure to Privilege Escalation to Mail Log Viewer / Password-Reset Email Disclosure vulnerability
Authenticated Subscriber+ Sensitive Information Exposure to Privilege Escalation to Mail Log Viewer / Password-Reset Email Disclosure vulnerability discovered by Duc Manh in WordPress Plugin WP Mail Catcher versions = 2.2.0...
WordPress WP Job Portal – AI-Powered Recruitment System for Company or Job Board website plugin <= 2.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin WP Job Portal versions = 2.7.0...
WordPress ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin <= 3.12.1 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Sawyer in WordPress Plugin ThirstyAffiliates versions = 3.12.1...
WordPress PPWP – Password Protect Pages plugin <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Sawyer in WordPress Plugin PPWP versions = 1.9.26...
WordPress GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin <= 2.8.199 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by churchill11 in WordPress Plugin GeoDirectory versions = 2.8.199...
WordPress Shipping Zones by Drawing for WooCommerce plugin <= 3.3.0 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Sebastian Albrecht mySebbe in WordPress Plugin Shipping Zones by Drawing for WooCommerce versions = 3.3.0...
WordPress Webmention plugin <= 5.10.1 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by poiri3r in WordPress Plugin Webmention versions = 5.10.1...
WordPress Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin <= 1.2.2 - Authenticated (Subscriber+) SQL Injection vulnerability
Authenticated Subscriber+ SQL Injection vulnerability discovered by sermsak in WordPress Plugin Majestic Support versions = 1.2.2...
WordPress Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin <= 1.57.3.1 - Insecure Direct Object Reference to Unauthenticated Arbitrary Draft Deletion and Takeover vulnerability
Insecure Direct Object Reference to Unauthenticated Arbitrary Draft Deletion and Takeover vulnerability discovered by Wordfence Argus in WordPress Plugin Forminator versions = 1.57.3.1...
WordPress Popup Builder – Create highly converting, mobile friendly marketing popups. plugin <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing vulnerability
Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing vulnerability discovered by braintx in WordPress Plugin Popup Builder versions = 4.4.5...
WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Photo Engine versions = 6.5.7...
WordPress Ad Inserter – Ad Manager & AdSense Ads plugin <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution vulnerability
Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Kuba in WordPress Plugin Ad Inserter versions = 2.8.19...
WordPress GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin <= 2.8.198 - Unauthenticated Shortcode Injection vulnerability
Unauthenticated Shortcode Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin GeoDirectory versions = 2.8.198...
WordPress Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF plugin <= 7.2.0 - Missing Authorization to Authenticated (Author+) Image Replacement vulnerability
Missing Authorization to Authenticated Author+ Image Replacement vulnerability discovered by Lucas Montes NiRoX in WordPress Plugin Perfect Images versions = 7.2.0...
WordPress Hustle – Email Marketing, Lead Generation, Optins, Popups plugin <= 7.8.14.3 - Missing Authorization to Authenticated (Custom+) ESP Credential Overwrite and Irreversible OAuth Token Deletion vulnerability
Missing Authorization to Authenticated Custom+ ESP Credential Overwrite and Irreversible OAuth Token Deletion vulnerability discovered by Ekene Umegakwe in WordPress Plugin Hustle versions = 7.8.14.3...
WordPress PDF Invoices & Packing Slips for WooCommerce plugin <= 5.16.5 - Unauthenticated Sensitive Information Exposure vulnerability
Unauthenticated Sensitive Information Exposure vulnerability discovered by Santh in WordPress Plugin WooCommerce PDF Invoices & Packing Slips versions = 5.16.5...
WordPress WP Booking System – Booking Calendar plugin <= 2.1.0.5 - Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion vulnerability
Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion vulnerability discovered by mamgad mamgad in WordPress Plugin WP Booking System versions = 2.1.0.5...
WordPress Product Filter for WooCommerce by WBW plugin <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure vulnerability
Missing Authorization to Unauthenticated Information Disclosure vulnerability discovered by pradeep suvarna in WordPress Plugin Product Filter by WBW versions = 3.4.6...
WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ayukiab in WordPress Plugin Fluent CRM versions = 3.2.6...
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by yzx001 in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 2.0.26...
WordPress BookIt plugin <= 2.6.0.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by cazy in WordPress Plugin BookIt versions = 2.6.0.6...