WordPress Convex theme <= 1.16.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Convex versions = 1.16.0...

WordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Dwell versions = 1.16.0...

WordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Edema versions = 1.2.2.2...

WordPress Greeny theme <= 2.10.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Greeny versions = 2.10.0...

WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Hogwords versions = 1.2.7...

WordPress Hygia theme <= 1.21.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Hygia versions = 1.21.0...

WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme IPharm versions = 1.2.4...

WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Let's Play versions = 1.1.15...

WordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Original versions = 1.9.0...

WordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Partiso versions = 1.1.13...

WordPress Rosalinda theme <= 1.2.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Rosalinda versions = 1.2.4...

WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Smart Casa versions = 1.0.12...

WordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Smash versions = 1.12.0...

WordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Tantra versions = 2.9.0...

WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Travesia versions = 1.1.16...

WordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Veto versions = 1.6.0...

WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Theme Buzz Stone | Magazine & Viral Blog WordPress Theme versions = 1.0.2...

WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Theme Photolia versions = 1.0.3...

WordPress Ambient theme <= 1.7 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Ambient versions = 1.7...

WordPress FoodBakery theme <= 4.6 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme FoodBakery versions = 4.6...

WordPress LMS theme <= 8.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme LMS versions = 8.3...

WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Baikuya in WordPress Theme Motors versions = 1.4.108...

WordPress Educavo theme <= 3.4.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Theme Educavo versions = 3.4.2...

WordPress Martfury - WooCommerce Marketplace WordPress theme theme <= 3.3.9 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Martfury - WooCommerce Marketplace WordPress theme theme = 3.3.9 - Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Martfury - WooCommerce Marketplace WordPress Theme versions = 3.3.9...

WordPress Grocery Shopping Store theme <= 1.3.3 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by HaiND in WordPress Theme Grocery Shopping Store versions = 1.3.3...

WordPress Jannah theme <= 7.6.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Theme Jannah versions = 7.6.5...

WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin YITH WooCommerce Affiliates versions = 3.31.0...

WordPress SMS Alert plugin 3.6.4-4.0.0 - Admin+ Network User Billing Phone Disclosure vulnerability

Admin+ Network User Billing Phone Disclosure vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin SMS Alert Order Notifications versions 3.6.4-4.0.0...

WordPress BackWPup plugin < 5.7.7 - Admin+ Path Traversal to RCE vulnerability

Admin+ Path Traversal to RCE vulnerability discovered by Bhaveshkumar Parmar in WordPress Plugin BackWPup versions 5.7.7...

WordPress Wallet System for WooCommerce plugin < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure vulnerability

Subscriber+ Store-Wide Wallet Transaction Disclosure vulnerability discovered by Sanyam Jain, Astra Security in WordPress Plugin Wallet System for WooCommerce versions 2.8.0...

WordPress BackWPup plugin 3.3-5.7.6 - Unauthenticated Backup Job Execution vulnerability

Unauthenticated Backup Job Execution vulnerability discovered by Duy Tran in WordPress Plugin BackWPup versions 3.3-5.7.6...

WordPress Database Addon For WPForms ( wpforms entries ) plugin < 1.1.1 - Arbitrary Form Entry Deletion vulnerability

Arbitrary Form Entry Deletion vulnerability discovered by Rik de Kok in WordPress Plugin Database Addon For WPForms wpforms entries versions 1.1.1...

WordPress Appointment Booking Plugin plugin < 5.7.3 - Unauthenticated Customer PII Disclosure vulnerability

Unauthenticated Customer PII Disclosure vulnerability discovered by Vũ Quang Huy in WordPress Plugin LatePoint versions 5.7.3...

WordPress Appointment Booking Plugin plugin < 5.6.5 - Agent+ Arbitrary Order, Customer and Transaction Deletion vulnerability

Agent+ Arbitrary Order, Customer and Transaction Deletion vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin LatePoint versions 5.6.5...

WordPress Appointment Booking Plugin plugin < 5.6.9 - Agent+ Cross-Agent Data Disclosure and Modification vulnerability

Agent+ Cross-Agent Data Disclosure and Modification vulnerability discovered by Artus KG in WordPress Plugin LatePoint versions 5.6.9...

WordPress Booking Calendar plugin 10.15-11.8.2 - Editor+ Arbitrary Option Disclosure vulnerability

Editor+ Arbitrary Option Disclosure vulnerability discovered by vuxvinh in WordPress Plugin Booking Calendar versions 10.15-11.8.2...

WordPress Easy Digital Downloads plugin < 3.7.1 - Subscriber+ Sensitive Information Disclosure vulnerability

Subscriber+ Sensitive Information Disclosure vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Easy Digital Downloads versions 3.7.1...

WordPress Booking Calendar plugin < 11.8 - Unauthenticated Booking Information Disclosure and Modification vulnerability

Unauthenticated Booking Information Disclosure and Modification vulnerability discovered by Olaf Schigt in WordPress Plugin Booking Calendar versions 11.8...

WordPress Image Photo Gallery Final Tiles Grid plugin < 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update vulnerability

Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update vulnerability discovered by Ala Bouali in WordPress Plugin Image Photo Gallery Final Tiles Grid versions 3.6.14...

NPM: Ghost: Remote Code Execution via Bookmark Card Images

NPM: Ghost: Remote Code Execution via Bookmark Card Images vulnerability discovered by ? in WordPress Npm ghost versions = 6.56.0, 6.67.0...

NPM: Ghost: Stored XSS via Embed Card Previews

NPM: Ghost: Stored XSS via Embed Card Previews vulnerability discovered by ? in WordPress Npm ghost versions = 6.34.0, 6.67.0...

NPM: Ghost : Stored XSS via SVG Files in Content Imports

NPM: Ghost : Stored XSS via SVG Files in Content Imports vulnerability discovered by ? in WordPress Npm ghost versions = 4.0.0, 6.67.0...

NPM: Ghost: Regular Expression Denial of Service in External Media Inliner

NPM: Ghost: Regular Expression Denial of Service in External Media Inliner vulnerability discovered by ? in WordPress Npm ghost versions = 5.37.0, 6.67.0...

NPM: Ghost: Regular Expression Denial of Service in Content Import

NPM: Ghost: Regular Expression Denial of Service in Content Import vulnerability discovered by ? in WordPress Npm ghost versions = 4.0.0, 6.67.0...

NPM: Ghost: Server-Side Request Forgery in Bookmark Fetching

NPM: Ghost: Server-Side Request Forgery in Bookmark Fetching vulnerability discovered by ? in WordPress Npm ghost versions = 6.54.1, 6.65.0...

NPM: Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

NPM: Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses vulnerability discovered by ? in WordPress Npm ghost versions = 6.0.9, 6.65.0...

NPM: Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

NPM: Ghost: Stored XSS via SVG Uploads Bypassing Sanitization vulnerability discovered by ? in WordPress Npm ghost versions = 4.22.0, 6.65.0...

NPM: Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages

NPM: Next.js: Pending use cache fill can leak Draft Mode content into regular responses and persisted pages vulnerability discovered by ? in WordPress Npm next versions = 16.3.0, 16.3.8...

NPM: Next.js has cache poisoning of SSG and ISR pages in self-hosted applications

NPM: Next.js has cache poisoning of SSG and ISR pages in self-hosted applications vulnerability discovered by ? in WordPress Npm next versions = 15.0.0, 15.5.27...

NPM: Next.js has information disclosure in development server's Model Context Protocol endpoint

NPM: Next.js has information disclosure in development server's Model Context Protocol endpoint vulnerability discovered by ? in WordPress Npm next versions = 16.0.0, 16.3.8...