WordPress Th Shop Mania theme <= 1.9.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by HaiND in WordPress Theme Th Shop Mania versions = 1.9.1...

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by hhhai in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.13.1...

WordPress Payever - WooCommerce Gateway plugin <= 4.8.2 - PHP Object Injection vulnerability

WordPress Payever - WooCommerce Gateway plugin = 4.8.2 - PHP Object Injection vulnerability discovered by Lee chul woong in WordPress Plugin Payever - WooCommerce Gateway versions = 4.8.2...

WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Jetpack versions = 16.2...

WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Jetpack versions = 16.2...

WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin Photo Gallery by 10Web versions = 1.8.47...

WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Hiro Code016Hiro in WordPress Plugin Dynamic User Directory versions = 2.4...

WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Quiz And Survey Master versions = 11.2.7...

WordPress Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin <= 5.6.9 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Customer PII Modification vulnerability

Authenticated Subscriber+ Insecure Direct Object Reference to Arbitrary Customer PII Modification vulnerability discovered by owlmind in WordPress Plugin LatePoint versions = 5.6.9...

WordPress WP Associate Post R2 plugin <= 5.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Associate Post R2 versions = 5.0.1...

WordPress Product Configurator for WooCommerce plugin <= 1.7.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Product Configurator for WooCommerce versions = 1.7.5...

WordPress QA Analytics plugin <= 5.3.0.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin QA Analytics versions = 5.3.0.0...

WordPress AcyMailing SMTP Newsletter plugin <= 11.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Tang in WordPress Plugin AcyMailing SMTP Newsletter versions = 11.1.0...

WordPress Post title marquee scroll plugin <= 9.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Post title marquee scroll versions = 9.9...

WordPress Pix por Piggly (para Woocommerce) plugin <= 2.1.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Pix por Piggly para Woocommerce versions = 2.1.2...

WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Leyka versions = 3.32.3...

WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Dynamic User Directory versions = 2.4...

WordPress affiliate-toolkit plugin <= 3.9.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin affiliate-toolkit versions = 3.9.1...

WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Frontend Admin by DynamiApps versions = 3.29.13...

WordPress WP Rentals theme <= 3.14.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme WP Rentals versions = 3.14.2...

WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Oly Hossen in WordPress Plugin Booktics versions = 1.0.27...

WordPress Modula Image Gallery plugin <= 3.0.11 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Peter Tang in WordPress Plugin Modula Image Gallery versions = 3.0.11...

WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Prime Slider – Addons For Elementor versions = 4.6.2...

WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Happy Addons for Elementor versions = 3.50.0...

WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Quiz And Survey Master versions = 11.2.7...

WordPress Hustle plugin <= 7.8.14.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dustin Lange in WordPress Plugin Hustle versions = 7.8.14.2...

WordPress Rocket Lazy Load plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Rocket Lazy Load versions = 2.4.0...

WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Element Pack Elementor Addons versions = 8.8.6...

WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by yzx001 in WordPress Plugin Media LIbrary Assistant versions = 3.41...

WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Element Pack Elementor Addons versions = 8.8.6...

WordPress OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin <= 6.3.10 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by uhcna in WordPress Plugin OMGF | Host Google Fonts Locally versions = 6.3.10...

WordPress Magee Shortcodes plugin <= 2.1.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Enrico Marcolini, Claudio Marchesini, Dottor Marc in WordPress Plugin Magee Shortcodes versions = 2.1.1...

WordPress WP Coder plugin 4.0-4.5.1 - Editor+ RCE vulnerability

Editor+ RCE vulnerability discovered by Ayush Srivastava in WordPress Plugin WP Coder versions 4.0-4.5.1...

WordPress Geliver Akıllı Kargo Pazaryeri plugin 3.0.0-3.1.0 - Unauthenticated API Key Disclosure vulnerability

Unauthenticated API Key Disclosure vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Geliver Akıllı Kargo Pazaryeri versions 3.0.0-3.1.0...

WordPress Integration for Epos Now and WooCommerce plugin 4.6.0-4.11.1 - Unauthenticated Action Scheduler Queue Disclosure vulnerability

Unauthenticated Action Scheduler Queue Disclosure vulnerability discovered by Raphael P. Cigana in WordPress Plugin Integration for Epos Now and WooCommerce versions 4.6.0-4.11.1...

WordPress String locator plugin < 2.6.8 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Raphael P. Cigana in WordPress Plugin String locator versions 2.6.8...

WordPress Koinonia Link plugin 1.1.2-1.1.4 - Subscriber+ Privilege Escalation to Administrator vulnerability

Subscriber+ Privilege Escalation to Administrator vulnerability discovered by ryan fabella in WordPress Plugin Koinonia Link versions 1.1.2-1.1.4...

WordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by T.Kalimullin in WordPress Plugin WP Rocket versions 3.23.5...

WordPress Animated Number Counters plugin < 3.1 - Editor+ Second-Order SQLi vulnerability

Editor+ Second-Order SQLi vulnerability discovered by Seongwon Lee in WordPress Plugin Animated Number Counters versions 3.1...

WordPress WP Rocket plugin < 3.23.5 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by sahinyes in WordPress Plugin WP Rocket versions 3.23.5...

WordPress Magee Shortcodes plugin <= 2.1.1 - Unauthenticated Mail Relay vulnerability

Unauthenticated Mail Relay vulnerability discovered by Erwan LR WPScan in WordPress Plugin Magee Shortcodes versions = 2.1.1...

WordPress MetForm plugin < 4.3.1 - Unauthenticated HTML Injection in Notification Emails vulnerability

Unauthenticated HTML Injection in Notification Emails vulnerability discovered by vuxvinh in WordPress Plugin Metform versions 4.3.1...

WordPress PowerPress Podcasting plugin by Blubrry plugin 11.13.12-11.17.10 - Contributor+ SSRF vulnerability

Contributor+ SSRF vulnerability discovered by Raj Ukani in WordPress Plugin PowerPress Podcasting versions 11.13.12-11.17.10...

WordPress User Private Files plugin < 2.1.9 - Subscriber+ User Email Address Disclosure vulnerability

Subscriber+ User Email Address Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin User Private Files versions 2.1.9...

WordPress WPCafe plugin < 3.0.21 - Unauthenticated Product Data Disclosure vulnerability

Unauthenticated Product Data Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin WPCafe versions 3.0.21...

WordPress CP Media Player plugin < 1.3.4 - Contributor+ Media Player Settings Update vulnerability

Contributor+ Media Player Settings Update vulnerability discovered by Ryan Fabella in WordPress Plugin CP Media Player versions 1.3.4...

WordPress MPG plugin < 4.2.3 - Editor+ SQLi vulnerability

Editor+ SQLi vulnerability discovered by ieuns in WordPress Plugin MPG versions 4.2.3...

WordPress Academy LMS plugin < 4.0.0 - Subscriber+ Cross-Course Quiz Answer Disclosure vulnerability

Subscriber+ Cross-Course Quiz Answer Disclosure vulnerability discovered by Morato Antoine in WordPress Plugin Academy LMS versions 4.0.0...

WordPress Envira Gallery plugin < 1.16.1 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Envira Photo Gallery versions 1.16.1...

WordPress Yaad Sarig Payment Gateway For WC plugin < 2.2.13 - Subscriber+ Arbitrary Order Payment Manipulation vulnerability

Subscriber+ Arbitrary Order Payment Manipulation vulnerability discovered by Ryan Fabella in WordPress Plugin Yaad Sarig Payment Gateway For WC versions 2.2.13...