WordPress Real 3D FlipBook plugin <= 5.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Real 3D FlipBook versions = 5.5...

WordPress Meta Box AIO plugin <= 3.7.1 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by wackydawg in WordPress Plugin Meta Box AIO versions = 3.7.1...

WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Fluent Forms Pro Add On Pack versions = 6.2.13...

WordPress Fluent Affiliate Pro plugin <= 1.6.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Affiliate Pro versions = 1.6.4...

WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ratchanon Chamnankit in WordPress Plugin WP Event Solution versions = 4.1.25...

WordPress File Uploads Addon for WooCommerce plugin 1.7.2-1.7.6 - Unauthenticated Direct File Access vulnerability

Unauthenticated Direct File Access vulnerability discovered by J4ck13Ch4n in WordPress Plugin File Uploads Addon for WooCommerce versions 1.7.2-1.7.6...

WordPress File Uploads Addon for WooCommerce plugin 1.7.2-1.7.5 - Unauthenticated Customer Uploaded File Disclosure vulnerability

Unauthenticated Customer Uploaded File Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin File Uploads Addon for WooCommerce versions 1.7.2-1.7.5...

WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Kit formerly ConvertKit for WooCommerce versions = 2.2.0...

WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme WPLMS versions = 4.972...

WordPress Morning for WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ParkHyunWoo in WordPress Plugin Morning for WooCommerce versions = 2.4.1...

WordPress HTTP Requests Manager plugin <= 1.3.11 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dodoh4t in WordPress Plugin HTTP Requests Manager versions = 1.3.11...

WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ParkHyunWoo in WordPress Plugin Database for CF7 versions = 1.2.6...

WordPress Content Visibility for Divi Builder plugin <= 5.03 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by ParkHyunWoo in WordPress Plugin Content Visibility for Divi Builder versions = 5.03...

WordPress WC Fields Factory plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ParkHyunWoo in WordPress Plugin WC Fields Factory versions = 4.1.12...

WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Theme EduMall versions = 4.5.3...

WordPress Lumise Product Designer plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Lumise Product Designer versions = 2.1.1...

WordPress Instapage Plugin plugin <= 3.7.2 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by ParkHyunWoo in WordPress Plugin Instapage Plugin versions = 3.7.2...

WordPress Edwiser Bridge plugin <= 4.3.4 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Jakub Herman in WordPress Plugin Edwiser Bridge versions = 4.3.4...

WordPress Wise Chat plugin <= 3.4.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by takito in WordPress Plugin Wise Chat versions = 3.4.3...

WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dodoh4t in WordPress Plugin Contact Form to DB by BestWebSoft versions = 1.7.6...

WordPress Booknetic plugin <= 4.8.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Bonds in WordPress Plugin Booknetic versions = 4.8.5...

WordPress Woffice theme <= 5.4.35 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Bonds in WordPress Theme Woffice versions = 5.4.35...

WordPress App for Cloudflare® plugin <= 1.10.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by takito in WordPress Plugin App for Cloudflare® versions = 1.10.1...

WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jakub Herman in WordPress Plugin PayPlug for WooCommerce Official versions = 3.1.0...

WordPress Jobs for WordPress plugin <= 2.8.2 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by hhhai in WordPress Plugin Jobs for WordPress versions = 2.8.2...

WordPress Piotnet Addons For Elementor plugin <= 7.1.71 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by dutafi in WordPress Plugin Piotnet Addons For Elementor versions = 7.1.71...

WordPress Wappointment plugin <= 2.7.7 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Md. Minaruzzaman Shovon in WordPress Plugin Wappointment versions = 2.7.7...

WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Aurélien BOURDOIS Elymaro in WordPress Plugin WP Duplicate versions = 1.1.11...

WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jamaal ahmed in WordPress Plugin Taskbot versions = 6.6...

WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Jamaal ahmed in WordPress Plugin Taskbot versions = 6.6...

WordPress Midtrans-WooCommerce plugin <= 2.32.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ParkHyunWoo in WordPress Plugin Midtrans-WooCommerce versions = 2.32.3...

WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Jamaal ahmed in WordPress Plugin Workreap Core versions = 3.4.5...

WordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Mapster WP Maps versions = 2.0.4...

WordPress Polylang plugin <= 3.8.7 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Polylang versions = 3.8.7...

WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin WP Event Solution versions = 4.1.25...

WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ayukiab in WordPress Plugin Groundhogg versions = 4.8.3...

WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ismayil Tahmazov in WordPress Plugin Xserver Migrator versions = 1.6.6...

WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Peter Tang in WordPress Plugin WP Event Solution versions = 4.1.25...

WordPress SMS Alert Order Notifications plugin <= 4.0.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Peter Tang in WordPress Plugin SMS Alert Order Notifications versions = 4.0.0...

WordPress Motors plugin <= 1.4.124 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Motors versions = 1.4.124...

WordPress Charitable plugin <= 1.8.12.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin Charitable versions = 1.8.12.3...

WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by jydae in WordPress Plugin GiveWP versions = 4.17.0...

WordPress picu plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin picu versions = 3.10.1...

WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin picu versions = 3.10.1...

WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Fluent Forms Pro Add On Pack versions = 6.2.13...

WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Filip Kowalski in WordPress Plugin GiveWP versions = 4.17.0...

WordPress Zero Spam plugin <= 5.7.11 - Bypass vulnerability vulnerability

Bypass vulnerability vulnerability discovered by Peter Tang in WordPress Plugin Zero Spam versions = 5.7.11...

WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Deva Parekh in WordPress Plugin Paid Member Subscriptions versions = 3.1.1...

WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Nguyen Viet Tin in WordPress Plugin WP User Profiles versions = 2.7.3...

WordPress PowerPress Podcasting plugin <= 11.17.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by b1ue0cean in WordPress Plugin PowerPress Podcasting versions = 11.17.9...