WordPress Popup Maker WP plugin 1.2.2.1-1.4.5 - Subscriber+ Zero-Argument PHP Callable Invocation vulnerability

Subscriber+ Zero-Argument PHP Callable Invocation vulnerability discovered by Artus KG in WordPress Plugin Popup Maker WP versions 1.2.2.1-1.4.5...

WordPress WP User Frontend plugin < 4.3.12 - Subscriber+ Post Creation vulnerability

Subscriber+ Post Creation vulnerability discovered by Erwan LR WPScan in WordPress Plugin WP User Frontend versions 4.3.12...

WordPress Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin <= 1.57.2 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Luke Eldridge system in WordPress Plugin Forminator versions = 1.57.2...

WordPress TranslatePress plugin <= 3.3.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by b1ue0cean in WordPress Plugin TranslatePress versions = 3.3.6...

WordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Forminator versions = 1.57.2...

WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability

Payment Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Forminator versions = 1.57.2...

WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by b1ue0cean in WordPress Plugin WP Statistics versions = 14.16.14...

WordPress JSON API Auth plugin <= 3.1.2 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Chi Trung Huynh in WordPress Plugin JSON API Auth versions = 3.1.2...

WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.11.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by vta.itsec in WordPress Plugin Gutenberg Blocks by Kadence Blocks versions = 3.7.11.1...

WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by nakko in WordPress Plugin The Events Calendar versions = 6.17.4...

WordPress Divi Membership plugin <= 2.2.0 - Unauthenticated Privilege Escalation via 'form_id' Parameter vulnerability

Unauthenticated Privilege Escalation via 'formid' Parameter vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin Divi Membership versions = 2.2.0...

WordPress Divi Membership plugin <= 2.3.0 - Unauthenticated Authentication Bypass via 'paypal_param' Parameter vulnerability

Unauthenticated Authentication Bypass via 'paypalparam' Parameter vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin Divi Membership versions = 2.3.0...

WordPress Giveaways and Contests by RafflePress plugin < 1.12.27 - Unauthenticated Stored Open Redirect vulnerability

Unauthenticated Stored Open Redirect vulnerability discovered by Dick Snel in WordPress Plugin Giveaways and Contests by RafflePress versions 1.12.27...

WordPress Giveaways and Contests by RafflePress plugin < 1.12.27 - Unauthenticated reCAPTCHA Secret Key Disclosure vulnerability

Unauthenticated reCAPTCHA Secret Key Disclosure vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Giveaways and Contests by RafflePress versions 1.12.27...

WordPress Unlimited Elements for Elementor plugin < 2.0.21 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions 2.0.21...

WordPress Motors plugin < 1.4.124 - Subscriber+ Cross-User Post Meta Modification vulnerability

Subscriber+ Cross-User Post Meta Modification vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Motors versions 1.4.124...

WordPress Motors plugin < 1.4.124 - Listing Manager+ Stored XSS vulnerability

Listing Manager+ Stored XSS vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Motors versions 1.4.124...

WordPress Request a Quote plugin <= 2.5.6 - Unauthenticated Quote Request Contact Record Disclosure vulnerability

Unauthenticated Quote Request Contact Record Disclosure vulnerability discovered by Artus KG in WordPress Plugin Request a Quote versions = 2.5.6...

WordPress Popup Maker plugin <= 1.4.5 - Subscriber+ Missing Authorization vulnerability

Subscriber+ Missing Authorization vulnerability discovered by Artus KG in WordPress Plugin Popup Maker WP versions = 1.4.5...

WordPress Paytm Payment Gateway plugin < 2.8.9 - Unauthenticated Order Status Manipulation vulnerability

Unauthenticated Order Status Manipulation vulnerability discovered by Artus KG in WordPress Plugin Paytm Payment Gateway versions 2.8.9...

WordPress WPMobile.App plugin <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter vulnerability

Unauthenticated Admin Account Takeover via 'wpappcategory' Parameter vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin WPMobile.App versions = 11.82...

WordPress Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin <= 3.2.6 - Authenticated (Subscriber+) Sensitive Information Exposure in Form Submissions Dashboard Widget vulnerability

Authenticated Subscriber+ Sensitive Information Exposure in Form Submissions Dashboard Widget vulnerability discovered by Jakub Herman in WordPress Plugin Otter - Gutenberg Block versions = 3.2.6...

WordPress Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin <= 6.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Theklis in WordPress Plugin Listdom versions = 6.1.1...

WordPress Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin <= 5.7.1 - Insecure Direct Object Reference to Unauthenticated Unauthorized Transaction Intent Creation/Modification and Invoice Enumeration vulnerability

Insecure Direct Object Reference to Unauthenticated Unauthorized Transaction Intent Creation/Modification and Invoice Enumeration vulnerability discovered by Niv Kochan, Matan Bachar in WordPress Plugin LatePoint versions = 5.7.1...

WordPress MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions plugin <= 5.0.18 - Authenticated (Store Manager+) SQL Injection vulnerability

Authenticated Store Manager+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin MultiVendorX versions = 5.0.18...

WordPress Ninja Forms plugin <= 3.15.4 - Unauthenticated Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submission vulnerability

Unauthenticated Stored Cross-Site Scripting via Paragraph Text RTE Field Submission vulnerability discovered by UKO - Korea univ. in WordPress Plugin Ninja Forms versions = 3.15.4...

WordPress Ninja Forms - File Uploads plugin <= 3.3.34 - Unauthenticated Arbitrary File Upload vulnerability

WordPress Ninja Forms - File Uploads plugin = 3.3.34 - Unauthenticated Arbitrary File Upload vulnerability discovered by daroo in WordPress Plugin Ninja Forms File Uploads Extension versions = 3.3.34...

WordPress Super Forms – Drag & Drop Form Builder plugin <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...

WordPress Super Forms – Drag & Drop Form Builder plugin <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read vulnerability

Unauthenticated Path Traversal to Arbitrary File Read vulnerability discovered by afei in WordPress Plugin Super Forms versions = 6.3.316...

WordPress DevKit Pro plugin <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flow vulnerability

Unauthenticated Authentication Bypass to Administrator Account Takeover via 'originaluserid' Cookie in Frontend Revert Switch Flow vulnerability discovered by h0xilo in WordPress Plugin DevKit Pro versions = 2.3.0...

WordPress CTX Feed Pro plugin <= 7.6.12 - Authenticated (Administrator+) Remote Code Execution vulnerability

Authenticated Administrator+ Remote Code Execution vulnerability discovered by Nguyen Truong Roll, Phap Nguyen Anh in WordPress Plugin CTX Feed Pro versions = 7.6.12...

NPM: vm2: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks

NPM: vm2: Incomplete nodejs. symbol filtering lets sandbox override host WebStream state checks vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.4, = 3.11.6...

NPM: vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape

NPM: vm2: NodeVM builtin allowlist bypass via node:test.run execArgv allows sandbox escape vulnerability discovered by ? in WordPress Npm vm2 versions = 3.9.6, = 3.11.6...

NPM: vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

host-realm require is reachable from sandboxed scripts vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.6...

NPM: vm2 exposes host HTTPS credentials and TLS traffic through globalAgent

NPM: vm2 exposes host HTTPS credentials and TLS traffic through globalAgent vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.3, = 3.11.6...

NPM: vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package

NPM: vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.6...

NPM: vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes

NPM: vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.6...

NPM: vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process

NPM: vm2: NodeVM node:-prefixed negative builtin deny bypass exposes childprocess vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.6...

NPM: vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor

NPM: vm2: vm.freeze/vm.readonly bypass via accessor descriptor vulnerability discovered by ? in WordPress Npm vm2 versions = 3.9.6, = 3.11.6...

NPM: vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE

NPM: vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.4, = 3.11.6...

NPM: vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection

NPM: vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection vulnerability discovered by ? in WordPress Npm vm2 versions 3.11.6...

NPM: vm2 allows a sandboxed plugin to execute native code through `node:sqlite`

NPM: vm2 allows a sandboxed plugin to execute native code through node:sqlite vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.3, = 3.11.6...

NPM: vm2 crypto builtin loads attacker native code through setEngine

NPM: vm2 crypto builtin loads attacker native code through setEngine vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.3, = 3.11.6...

NPM: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector

NPM: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector vulnerability discovered by ? in WordPress Npm vm2 versions = 3.10.2, = 3.11.6...

NPM: vm2 NodeVM can replace the host process TLS trust store

NPM: vm2 NodeVM can replace the host process TLS trust store vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.3, = 3.11.6...

NPM: vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted

NPM: vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.6...

NPM: devalue: `stringify`/`uneval` serialize shared memory

NPM: devalue: stringify/uneval serialize shared memory vulnerability discovered by ? in WordPress Npm devalue versions = 5.1.0, = 5.9.2...

NPM: devalue: Residual sparse-array CPU amplification in uneval

NPM: devalue: Residual sparse-array CPU amplification in uneval vulnerability discovered by ? in WordPress Npm devalue versions = 5.9.2...

NPM: devalue: Repeated primitive strings cause quadratic expansion in uneval

NPM: devalue: Repeated primitive strings cause quadratic expansion in uneval vulnerability discovered by ? in WordPress Npm devalue versions = 5.9.2...

NPM: devalue: Sparse arrays emitted by uneval cause eager allocation when evaluated

NPM: devalue: Sparse arrays emitted by uneval cause eager allocation when evaluated vulnerability discovered by ? in WordPress Npm devalue versions = 1.0.0, = 5.9.2...