WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Rasyid Abdi Gantoro in WordPress Plugin JS Help Desk versions = 4.0.0...

WordPress Name Directory plugin <= 1.34.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Masaya Morita @mrtmyix in WordPress Plugin Name Directory versions = 1.34.2...

WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Presto Player versions = 4.5.2...

WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin Event Tickets versions = 5.30.0...

WordPress Premium Addons for Elementor plugin <= 4.11.109 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Premium Addons for Elementor versions = 4.11.109...

WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerability

Arbitrary Shortcode Execution vulnerability discovered by changsheng in WordPress Plugin Name Directory versions = 1.34.2...

WordPress Logo Showcase plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Logo Showcase versions = 4.0.4...

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar versions = 5.14.2...

WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin eCommerce Product Catalog versions = 3.6.2...

WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ayukiab in WordPress Plugin Groundhogg versions = 4.8.3...

WordPress Video Conferencing with Zoom plugin <= 4.6.10 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Video Conferencing with Zoom versions = 4.6.10...

WordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ratchanon Chamnankit in WordPress Plugin WP Mailster versions = 1.9.0.0...

WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dcs in WordPress Plugin CURCY versions = 2.2.17...

WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nixxies in WordPress Plugin WP Admin Audit versions = 1.2.17...

WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by KePulsary in WordPress Plugin JS Help Desk versions = 4.0.0...

WordPress WP Ultimate Review plugin < 2.4.4 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Jakub Herman in WordPress Plugin Wp Ultimate Review versions 2.4.4...

WordPress WP VR plugin <= 9.1.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Zac Lou in WordPress Plugin WP VR versions = 9.1.3...

WordPress PowerPress Podcasting plugin <= 11.17.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Intrudify in WordPress Plugin PowerPress Podcasting versions = 11.17.9...

WordPress QR Redirector plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin QR Redirector versions = 2.0.5...

WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin GiveWP versions = 4.17.0...

WordPress Events Manager plugin <= 7.4.5 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Events Manager versions = 7.4.5...

WordPress Memberful - Membership Plugin plugin <= 1.81.2 - Sensitive Data Exposure vulnerability

WordPress Memberful - Membership Plugin plugin = 1.81.2 - Sensitive Data Exposure vulnerability discovered by sungbyeongchan in WordPress Plugin Memberful - Membership Plugin versions = 1.81.2...

WordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin B Blocks versions = 2.1.8...

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Image Photo Gallery Final Tiles Grid versions = 3.6.13...

WordPress WP Ultimate Review plugin < 2.4.4 - Unauthenticated DoS vulnerability

Unauthenticated DoS vulnerability discovered by Alban Roche in WordPress Plugin Wp Ultimate Review versions 2.4.4...

WordPress WP Ultimate Review plugin < 2.4.4 - Unauthenticated DoS vulnerability

Unauthenticated DoS vulnerability discovered by Alban Roche in WordPress Plugin Wp Ultimate Review versions 2.4.4...

WordPress WP 2FA plugin < 4.1.0 - Two-Factor Authentication Bypass vulnerability

Two-Factor Authentication Bypass vulnerability discovered by Suhayb Ahmed cyboltx in WordPress Plugin WP 2FA versions 4.1.0...

WordPress SaveTo Wishlist Lite plugin < 1.1.5 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin SaveTo Wishlist Lite versions 1.1.5...

WordPress Kubio AI Page Builder plugin < 2.9.3 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Jakub Herman in WordPress Plugin Kubio AI Page Builder versions 2.9.3...

WordPress Unlimited Elements for Elementor plugin 1.5.142-2.0.20 - Subscriber+ SQLi vulnerability

Subscriber+ SQLi vulnerability discovered by Jakub Herman in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions 1.5.142-2.0.20...

WordPress Loco Translate plugin < 2.8.9 - Translator+ Limited File Read vulnerability

Translator+ Limited File Read vulnerability discovered by Shivamani Vastrala in WordPress Plugin Loco Translate versions 2.8.9...

WordPress MPG plugin < 4.2.3 - Editor+ Arbitrary File Read vulnerability

Editor+ Arbitrary File Read vulnerability discovered by ieuns in WordPress Plugin MPG versions 4.2.3...

WordPress TillKit plugin < 1.0.5 - Unauthenticated POS Takeover vulnerability

Unauthenticated POS Takeover vulnerability discovered by Pedro Pinho in WordPress Plugin TillKit versions 1.0.5...

WordPress UPI QR Code Payment Gateway plugin <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery vulnerability

Unauthenticated Cross-Order Payment-Status Forgery vulnerability discovered by Pedro Pinho in WordPress Plugin UPI QR Code Payment Gateway versions = 1.4.3...

WordPress Zombify plugin <= 1.7.7 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Phat RiO in WordPress Plugin Zombify versions = 1.7.7...

WordPress Haaken theme <= 1.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Haaken versions = 1.5...

WordPress Grand Restaurant theme < 7.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Grand Restaurant versions 7.0.11...

WordPress Total Donations plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Total Donations versions = 2.0.5...

WordPress Sermon'e plugin <= 1.0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Sermon'e versions = 1.0.2...

WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin WooCommerce Appointments versions = 5.3.2...

WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin WooCommerce Designer Pro versions = 1.9.33...

WordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin WP Media folder versions = 6.2.2...

WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

WordPress Progressify - Progressive Web App PWA plugin = 1.6.0 - Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Progressify - Progressive Web App PWA versions = 1.6.0...

WordPress Ohio Extra plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Ohio Extra versions = 3.6.8...

WordPress Mooberry Book Manager plugin 4.16.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dodoh4t in WordPress Plugin Mooberry Book Manager versions 4.16.2...

WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin WP User Frontend Pro versions = 4.2.13...

WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by HaiND in WordPress Plugin Smart Forms versions = 2.6.104...

WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Chamseddine Bouzaiene in WordPress Plugin Frontend File Manager versions = 23.6...

WordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin SUMO Affiliates Pro versions = 11.7.0...

WordPress Faktur Pro for WooCommerce plugin <= 3.2.2 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by HieuPenguinnn in WordPress Plugin Faktur Pro for WooCommerce versions = 3.2.2...