WordPress WP Custom HTML Pages plugin <= 0.6.2 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin WP Custom HTML Page versions = 0.6.2...

WordPress Term Pages plugin < 2.0.0 - Unauthenticated SQL Injection via tp_lookup vulnerability

Unauthenticated SQL Injection via tplookup vulnerability discovered by João Ramos Maciel in WordPress Plugin Term Pages versions 2.0.0...

WordPress Download Monitor plugin < 5.2.6 - Unauthenticated Download Log Injection vulnerability

Unauthenticated Download Log Injection vulnerability discovered by Anirudh Gupta in WordPress Plugin Download Monitor versions 5.2.6...

WordPress LogMyTrip plugin <= 1.9 - Unauthenticated SQL Injection via 'tid' Cookie vulnerability

Unauthenticated SQL Injection via 'tid' Cookie vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin LogMyTrip versions = 1.9...

WordPress YMC Filter plugin < 3.12.8 - Contributor+ Stored XSS via Layout Builder Schema vulnerability

Contributor+ Stored XSS via Layout Builder Schema vulnerability discovered by Usama Arshad in WordPress Plugin Filter & Grids versions 3.12.8...

WordPress Wired Impact Volunteer Management plugin < 2.8.2 - Subscriber+ Arbitrary RSVP Removal via wivm_remove_rsvp vulnerability

Subscriber+ Arbitrary RSVP Removal via wivmremoversvp vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Wired Impact Volunteer Management versions 2.8.2...

WordPress Link Library plugin < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form vulnerability

Unauthenticated SQL Injection via the Front-End Link Submission Form vulnerability discovered by Abdullah Kareem cyberkareem in WordPress Plugin Link Library versions 7.9.3...

WordPress SM Page Duplicator plugin <= 1.0.0 - Editor+ SQL Injection via Page Duplication vulnerability

Editor+ SQL Injection via Page Duplication vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin sm page duplicator versions = 1.0.0...

WordPress Slick Slider plugin < 0.5.3 - Contributor+ Stored XSS via Gallery Shortcode vulnerability

Contributor+ Stored XSS via Gallery Shortcode vulnerability discovered by testoun in WordPress Plugin Slick Slider versions 0.5.3...

WordPress Chama plugin < 1.0.13 - Unauthenticated Arbitrary User Password Reset vulnerability

Unauthenticated Arbitrary User Password Reset vulnerability discovered by moonge in WordPress Plugin ChamaWP versions 1.0.13...

WordPress Clearfy plugin < 2.4.3 - Admin+ PHP Object Injection via Settings Import vulnerability

Admin+ PHP Object Injection via Settings Import vulnerability discovered by Omar Elshopky in WordPress Plugin Clearfy Cache versions 2.4.3...

WordPress YMC Filter plugin < 3.12.9 - Author+ Stored XSS via SVG Icon Upload vulnerability

Author+ Stored XSS via SVG Icon Upload vulnerability discovered by Artus KG in WordPress Plugin Filter & Grids versions 3.12.9...

WordPress Sunshine Photo Cart plugin < 3.6.12 - Unauthenticated Private Gallery Comment Disclosure vulnerability

Unauthenticated Private Gallery Comment Disclosure vulnerability discovered by Farid Narimanov in WordPress Plugin Sunshine Photo Cart versions 3.6.12...

WordPress Blubrry PowerPress plugin < 11.16.11 - Contributor+ Stored XSS via Podcast Episode Chapters URL vulnerability

Contributor+ Stored XSS via Podcast Episode Chapters URL vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin PowerPress Podcasting versions 11.16.11...

WordPress Classified Listing plugin < 5.4.4 - Contributor+ Unpublished Post Content Disclosure via rtcl_block_css_get_posts vulnerability

Contributor+ Unpublished Post Content Disclosure via rtclblockcssgetposts vulnerability discovered by Huseyin Mertoglu in WordPress Plugin Classified Listing versions 5.4.4...

WordPress Newsletters plugin < 4.16 - Unauthenticated PHP Object Injection via Date Form Field vulnerability

Unauthenticated PHP Object Injection via Date Form Field vulnerability discovered by Sai Praneeth Koti in WordPress Plugin Newsletters versions 4.16...

WordPress Smart Cleaning theme <= 4.8.6 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Denver Jackson in WordPress Theme Smart Cleaning versions = 4.8.6...

WordPress EPROLO Dropshipping plugin <= 2.4.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by hivesec in WordPress Plugin EPROLO Dropshipping versions = 2.4.2...

WordPress Warehouse Cargo theme <= 2.7.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Denver Jackson in WordPress Theme Warehouse Cargo versions = 2.7.0...

WordPress Estatik plugin < 4.3.3 - Login CSRF vulnerability

Login CSRF vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Estatik versions 4.3.3...

WordPress Ajax Search Lite plugin < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint vulnerability

Unauthenticated PHP Object Injection via Search Statistics REST Endpoint vulnerability discovered by Jakub Herman in WordPress Plugin Ajax Search Lite versions 4.14.5...

WordPress Flatastic theme <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Flatastic versions = 2.0...

WordPress Aora theme <= 1.3.19 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Son Bach & Lan Vy HPT Vietnam in WordPress Theme Aora versions = 1.3.19...

WordPress Flatastic theme <= 2.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Flatastic versions = 2.0...

WordPress Estatik Real Estate Plugin plugin < 4.3.4 - Unauthenticated Arbitrary-Recipient Mail Relay via Signed-Value Mismatch vulnerability

Unauthenticated Arbitrary-Recipient Mail Relay via Signed-Value Mismatch vulnerability discovered by Erwan LR WPScan in WordPress Plugin Estatik versions 4.3.4...

WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Capella versions = 2.5.5...

WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Capella versions = 2.5.5...

WordPress Homlisti theme <= 3.1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Homlisti versions = 3.1.2...

WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by daroo in WordPress Plugin Directory Pro versions = 2.5.8...

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in next-tinacms-s3 and sibling production media adapters vulnerability discovered by ? in WordPress Npm next-tinacms-s3 versions 23.0.4...

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in next-tinacms-s3 and sibling production media adapters vulnerability discovered by ? in WordPress Npm next-tinacms-azure versions 14.0.4...

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in next-tinacms-s3 and sibling production media adapters vulnerability discovered by ? in WordPress Npm next-tinacms-dos versions 23.0.4...

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in next-tinacms-s3 and sibling production media adapters vulnerability discovered by ? in WordPress Npm next-tinacms-cloudinary versions 26.0.4...

NPM: SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses

NPM: SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses vulnerability discovered by ? in WordPress Npm mcp-searxng versions 1.12.0...

NPM: SearXNG MCP Server: Additional hardened-mode SSRF bypasses

NPM: SearXNG MCP Server: Additional hardened-mode SSRF bypasses vulnerability discovered by ? in WordPress Npm mcp-searxng versions 1.2.1...

NPM: SearXNG MCP Server is Vulnerable to SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)

NPM: SearXNG MCP Server is Vulnerable to SSRF in weburlread: the internal-address guard is disabled by default MCPHTTPHARDEN off vulnerability discovered by ? in WordPress Npm mcp-searxng versions 1.2.1...

NPM: claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

NPM: claude-faf-mcp has an arbitrary local file read/write via unconfined path argument in FAF tools vulnerability discovered by ? in WordPress Npm claude-faf-mcp versions = 5.7.1...

NPM: faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

NPM: faf-mcp has an arbitrary local file read/write via unconfined path argument in FAF tools vulnerability discovered by ? in WordPress Npm faf-mcp versions = 2.1.2...

NPM: grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools

NPM: grok-faf-mcp has an arbitrary local file read via unconfined path argument in FAF tools vulnerability discovered by ? in WordPress Npm grok-faf-mcp versions = 1.5.2...

WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Tin Pham aka TF1T in WordPress Plugin Elementor Pro versions = 4.2.1...

WordPress Shuffle theme <= 1.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Shuffle versions = 1.8...

WordPress GenesisExpo Core plugin <= 1.3.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Plugin GenesisExpo Core versions = 1.3.9...

WordPress Spectra theme <= 2.6.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Spectra versions = 2.6.1...

WordPress MedXtore – Responsive Multipurpose Elementor WooCommerce WordPress Theme theme <= 3.3.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO in WordPress Theme MedXtore – Responsive Multipurpose Elementor WooCommerce WordPress Theme versions = 3.3.4...

WordPress DSK theme <= 2.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme DSK versions = 2.1...

WordPress KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme theme <= 2.7 - Local File Inclusion vulnerability

WordPress KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme theme = 2.7 - Local File Inclusion vulnerability discovered by Phat RiO in WordPress Theme KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme versions = 2.7...

WordPress Brizy - Page Builder plugin < 2.8.19 - Contributor+ Stored XSS via Featured Image Focal Point vulnerability

WordPress Brizy - Page Builder plugin 2.8.19 - Contributor+ Stored XSS via Featured Image Focal Point vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Brizy versions 2.8.19...

WordPress Brizy - Page Builder plugin < 2.8.19 - Author+ Stored XSS via brizy_set_project Global Project Code Asset vulnerability

WordPress Brizy - Page Builder plugin 2.8.19 - Author+ Stored XSS via brizysetproject Global Project Code Asset vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Brizy versions 2.8.19...

WordPress Welcart e-Commerce plugin < 2.11.32 - Editor+ SQL Injection via CSV Import vulnerability

Editor+ SQL Injection via CSV Import vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Welcart e-Commerce versions 2.11.32...

WordPress Contest Gallery plugin < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library vulnerability

Author+ Arbitrary Post Deletion via postcgyoutubedeletefromlibrary vulnerability discovered by Sai Praneeth Koti in WordPress Plugin Contest Gallery versions 30.0.7...