49933 matches found
WordPress SlideShowPro SC plugin <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by MAJidox in WordPress Plugin SlideShowPro SC versions = 1.0.2...
WordPress CI HUB Connector plugin <= 1.2.106 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin CI HUB Connector versions = 1.2.106...
WordPress Table Manager plugin <= 1.0.0 - Authenticated (Contributor+) Sensitive Information Exposure vulnerability
Authenticated Contributor+ Sensitive Information Exposure vulnerability discovered by Itthidej Aramsri Boeing777 in WordPress Plugin Table Manager versions = 1.0.0...
WordPress HTTP Headers plugin <= 1.19.2 - Authenticated (Administrator+) External Control of File Name or Path to RCE vulnerability
Authenticated Administrator+ External Control of File Name or Path to RCE vulnerability discovered by Chiao-Lin Yu Steven Meow - Trend Micro in WordPress Plugin HTTP Headers versions = 1.19.2...
WordPress CalJ Shabbat Times plugin <= 1.5 - Authenticated (Subscriber+) Arbitrary Settings Modification vulnerability
Authenticated Subscriber+ Arbitrary Settings Modification vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin CalJ Shabbat Times versions = 1.5...
WordPress Gallagher Website Design plugin <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Gallagher Website Design versions = 2.6.4...
WordPress TP Restore Categories And Taxonomies plugin <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Taxonomy Deletion vulnerability
Missing Authorization to Authenticated Subscriber+ Taxonomy Deletion vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin TP Restore Categories And Taxonomies versions = 1.0.1...
WordPress RTMKit plugin <= 2.0.2 - Authenticated (Author+) Local File Inclusion vulnerability
Authenticated Author+ Local File Inclusion vulnerability discovered by momopon1415 in WordPress Plugin RTMKit versions = 2.0.2...
WordPress Gutentools plugin <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Gutentools versions = 1.1.3...
WordPress RTMKit plugin <= 2.0.7 - Authenticated (Contributor+) Limited Local File Inclusion vulnerability
Authenticated Contributor+ Limited Local File Inclusion vulnerability discovered by wesley wcraft in WordPress Plugin RTMKit versions = 2.0.7...
WordPress WP Grid Builder plugin <= 2.3.3 - Authenticated (Subscriber+) Privilege Escalation vulnerability
Authenticated Subscriber+ Privilege Escalation vulnerability discovered by h0xilo in WordPress Plugin WP Grid Builder versions = 2.3.3...
WordPress Quotes llama plugin < 3.1.6 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Pablo González Pérez in WordPress Plugin Quotes llama versions 3.1.6...
WordPress Kali Forms — Contact Form & Drag-and-Drop Builder plugin < 2.4.17 - Unauthenticated Media Upload vulnerability
Unauthenticated Media Upload vulnerability discovered by Alexander Jurkschat in WordPress Plugin Kali Forms versions 2.4.17...
WordPress King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder plugin <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Naoya Takahashi nakko in WordPress Plugin King Addons for Elementor versions = 51.1.62...
WordPress ZHBackup – Backup, Restore & Migration plugin <= 2.4.2 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ZHBackup – Backup, Restore & Migration versions = 2.4.2...
WordPress Shirt Product Designer for WooCommerce plugin 1.0.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Evan NR in WordPress Plugin Shirt Product Designer for WooCommerce versions 1.0.4...
WordPress SiteSkite plugin <= 2.1.5 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SiteSkite versions = 2.1.5...
WordPress RepairBuddy plugin <= 4.1224 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability discovered by Nasur ullah in WordPress Plugin RepairBuddy versions = 4.1224...
WordPress Verified Reviews (Avis Vérifiés) plugin <= 2.4.6 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Mael MARTIN, Othmane EL AYADI in WordPress Plugin Verified Reviews Avis Vérifiés versions = 2.4.6...
WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by JunHee CHO in WordPress Plugin WPCS versions = 1.3.2...
WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by William Honnér in WordPress Plugin WP Fast Total Search versions = 1.82.284...
WordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dodoh4t in WordPress Plugin WP Docs versions = 2.3.1...
WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peng Zhou in WordPress Plugin BuddyForms versions = 2.9.0...
WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability
Path Traversal vulnerability discovered by Sergei Pro in WordPress Plugin Groundhogg versions = 4.7.1...
WordPress Advanced Product Fields Extended for WooCommerce plugin <= 3.1.6 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by Maarten in WordPress Plugin Advanced Product Fields Extended for WooCommerce versions = 3.1.6...
WordPress Robokassa payment gateway for Woocommerce plugin <= 1.8.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by HaiND in WordPress Plugin Robokassa payment gateway for Woocommerce versions = 1.8.9...
WordPress Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.22 - Authenticated (Contributor+) Local File Inclusion vulnerability
Authenticated Contributor+ Local File Inclusion vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Event SOlution versions = 4.1.22...
WordPress User Access Manager plugin <= 2.3.18 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin User Access Manager versions = 2.3.18...
WordPress FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin <= 3.1.10 - Authenticated (Author+) Remote Code Execution to Privilege Escalation vulnerability
Authenticated Author+ Remote Code Execution to Privilege Escalation vulnerability discovered by Wordfence PRISM in WordPress Plugin FireBox versions = 3.1.10...
WordPress Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Nabil Irawan in WordPress Plugin Contact Form to DB by BestWebSoft versions = 1.7.5...
WordPress WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Ivaylo in WordPress Plugin ChatBot versions = 8.7.3...
WordPress Repeater Fields for Gravity Forms plugin <= 3.0.4 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by andrea bocchetti in WordPress Plugin Repeater Fields for Gravity Forms versions = 3.0.4...
WordPress Product Filter for WooCommerce by WBW plugin <= 3.4.2 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Yuto Hyakumoto in WordPress Plugin Product Filter by WBW versions = 3.4.2...
WordPress WP Crowdfunding plugin <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Crowdfunding versions = 2.2.1...
WordPress Shopping Cart & eCommerce Store plugin <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action vulnerability
Authenticated Store Manager+ Privilege Escalation to ecajaxsavepagedefaultoptions AJAX Action vulnerability discovered by Wordfence PRISM in WordPress Plugin WP EasyCart versions = 5.9.3...
WordPress WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Naoya Takahashi nakko in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.4.1...
WordPress User Role Editor – PublishPress Capabilities: Access Control and User Roles plugin <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant vulnerability
Authenticated Editor+ Privilege Escalation to Fresh-Install Default Capability Grant vulnerability discovered by Wordfence PRISM in WordPress Plugin PublishPress Capabilities versions = 2.50.0...
WordPress YITH WooCommerce Waitlist Premium plugin <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin vulnerability
Authenticated Subscriber+ Privilege Escalation to Admin vulnerability discovered by Michele Genito in WordPress Plugin YITH WooCommerce Waitlist Premium versions = 3.35.0...
WordPress WP plugin Bluehost plugin <= 4.19.0 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by sorin vasile in WordPress Plugin WP Plugin Bluehost versions = 4.19.0...
WordPress WP plugin Web plugin <= 2.3.5 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by sorin vasile in WordPress Plugin WP Plugin Web versions = 2.3.5...
WordPress WP plugin Crazy Domains plugin <= 2.5.2 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by sorin vasile in WordPress Plugin WP Plugin Crazy Domains versions = 2.5.2...
WordPress WP Module Data plugin <= 2.9.7 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by sorin vasile in WordPress Plugin WP Module Data versions = 2.9.7...
WordPress WP plugin Hostgator plugin <= 3.2.0 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by sorin vasile in WordPress Plugin WP Plugin Hostgator versions = 3.2.0...
WordPress Next-Cart Store to WooCommerce Migration plugin <= 3.9.8 - Unauthenticated Authentication Bypass via Default '__token__' Fallback in REST Migration Endpoint vulnerability
Unauthenticated Authentication Bypass via Default 'token' Fallback in REST Migration Endpoint vulnerability discovered by Samuele Santonicola in WordPress Plugin Next-Cart Store to WooCommerce Migration versions = 3.9.8...
WordPress Hustle plugin < 7.8.14.2 - Unauthenticated Arbitrary Shortcode Execution vulnerability
Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Jakub Herman in WordPress Plugin Hustle versions 7.8.14.2...
WordPress Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin < 3.0.9 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Farid Narimanov in WordPress Plugin Orbit Fox by ThemeIsle versions 3.0.9...
WordPress WPLP Cookie Consent plugin < 4.4.2 - Subscriber+ Missing Authorization vulnerability
Subscriber+ Missing Authorization vulnerability discovered by Naoki Kawahigashi in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions 4.4.2...
WordPress Kirki plugin 6.2.1-6.2.5 - Unauthenticated Non-Public Post Content Disclosure vulnerability
Unauthenticated Non-Public Post Content Disclosure vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin Kirki versions 6.2.1-6.2.5...
WordPress Sunshine Photo Cart plugin < 3.7 - Unauthenticated Price Manipulation vulnerability
Unauthenticated Price Manipulation vulnerability discovered by Farid Narimanov in WordPress Plugin Sunshine Photo Cart versions 3.7...