52802 matches found
WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MPG versions = 4.2.3...
WordPress Razorpay Payment Links for WooCommerce plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Oly Hossen in WordPress Plugin Razorpay Payment Links for WooCommerce versions = 2.1.5...
WordPress Polylang plugin <= 3.8.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Polylang versions = 3.8.9...
WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Cool Formkit Lite versions = 2.7.8...
WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Visual Composer Website Builder versions = 45.16.2...
WordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Elaprendiz1927 in WordPress Plugin Newsletters, Email Marketing, SMS and Popups by Omnisend versions = 1.9.0...
WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Virtue/Ascend/Pinnacle Toolkit versions = 4.9.12.1...
WordPress Review Schema plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Oly Hossen in WordPress Plugin Review Schema versions = 3.1.0...
WordPress Notivo plugin <= 1.4.2 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ashish Agarwal @Donrulezz in WordPress Plugin Notivo versions = 1.4.2...
WordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin EWWW Image Optimizer versions = 8.7.7...
WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Intrudify in WordPress Plugin Media LIbrary Assistant versions = 3.41...
WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin The Events Calendar versions = 6.17.5...
WordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Rully Miftahur Rozaq in WordPress Plugin Strong Testimonials versions = 3.3.11...
WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Intrudify in WordPress Plugin Event Tickets versions = 5.29.5...
WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability discovered by rpgsec in WordPress Plugin AcyMailing SMTP Newsletter versions = 11.0.5...
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability
Bypass vulnerability vulnerability discovered by rpgsec in WordPress Plugin OAuth Single Sign On – SSO OAuth Client versions = 7.1.2...
WordPress WordPress Persistent Login plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin WordPress Persistent Login versions = 3.1.3...
WordPress If-So Dynamic Content Personalization plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin If-So Dynamic Content Personalization versions = 1.10.1...
WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin WPFunnels versions = 3.13.1...
WordPress WP Photo Album Plus plugin <= 9.3.02.003 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin WP Photo Album Plus versions = 9.3.02.003...
WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin Ultimate Maps by Supsystic versions = 1.5.5...
WordPress Popup by Supsystic plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin Popup by Supsystic versions = 1.13.1...
WordPress Easy Google Maps plugin <= 1.14.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin Easy Google Maps versions = 1.14.6...
WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ivaylo Atanassov in WordPress Plugin Quiz And Survey Master versions = 11.2.6...
WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.13 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Premmerce Permalink Manager for WooCommerce versions = 2.3.13...
WordPress CMB2 plugin <= 2.13.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Jorgson in WordPress Plugin CMB2 versions = 2.13.0...
WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin OAuth Server versions = 4.5.1...
WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin CF7 Views Complete Entry Management for Contact Form 7 versions = 3.2.5...
WordPress Quiz Cat plugin <= 3.1.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Quiz Cat versions = 3.1.1...
WordPress Easy Pricing Tables plugin <= 4.1.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Easy Pricing Tables versions = 4.1.2...
WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability
Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Two Factor versions = 0.16.0...
WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by gueco in WordPress Plugin Prevent files / folders access versions = 2.6.7...
WordPress Astra WordPress theme theme <= 4.13.12 - Content Injection vulnerability
Content Injection vulnerability discovered by savphill in WordPress Theme Astra WordPress Theme versions = 4.13.12...
WordPress Virtue Premium theme <= 4.10.22 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Patchstack in WordPress Theme Virtue Premium versions = 4.10.22...
WordPress Virtue Premium theme <= 4.10.21 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Patchstack in WordPress Theme Virtue Premium versions = 4.10.21...
WordPress ReactPress – Create React App for WordPress plugin <= 3.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Nabil Irawan in WordPress Plugin ReactPress versions = 3.4.0...
WordPress Real Estate Manager – Property Listing and Agent Management plugin <= 7.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Real Estate Manager versions = 7.3...
WordPress Frontend Post Submission Manager Lite – Guest Post and Frontend Submission Forms plugin <= 1.3.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability discovered by Tarcísio Luchesi De Almeida Silva Poystick in WordPress Plugin Frontend Post Submission Manager Lite versions = 1.3.4...
WordPress Post Views Stats Counter plugin <= 1.1.7 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Nawaf Althurwi JailBr3ak in WordPress Plugin Post Views Stats Counter versions = 1.1.7...
WordPress Product Designer App plugin <= 1.1.3 - Unauthenticated Arbitrary File Read vulnerability
Unauthenticated Arbitrary File Read vulnerability discovered by Sebastian Albrecht mySebbe in WordPress Plugin Product Designer App versions = 1.1.3...
WordPress Simply Schedule Appointments plugin <= 1.6.12.27 - Authenticated (Subscriber+) Local File Inclusion vulnerability
Authenticated Subscriber+ Local File Inclusion vulnerability discovered by crow in WordPress Plugin Simply Schedule Appointments versions = 1.6.12.27...
WordPress Course Booking System plugin 7.0-7.0.8 - Unauthenticated Attendee PII Disclosure vulnerability
Unauthenticated Attendee PII Disclosure vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Course Booking System versions 7.0-7.0.8...
WordPress YayReviews plugin 1.0.4-1.4.0 - Unauthenticated Sensitive Data Disclosure vulnerability
Unauthenticated Sensitive Data Disclosure vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin YayReviews versions 1.0.4-1.4.0...
WordPress Content Egg plugin < 11.9.0 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by aymen benlamari in WordPress Plugin Content Egg versions 11.9.0...
WordPress Media Library Organizer plugin 2.0.4-2.1.3 - Contributor+ Arbitrary Taxonomy Term Creation vulnerability
Contributor+ Arbitrary Taxonomy Term Creation vulnerability discovered by Jashid Sany in WordPress Plugin Media Library Organizer - WordPress Media Library Folders & File Manager versions 2.0.4-2.1.3...
WordPress InPost PL plugin 1.7.5-1.9.7 - Unauthenticated Order Status Forgery vulnerability
Unauthenticated Order Status Forgery vulnerability discovered by ryan fabella in WordPress Plugin InPost PL versions 1.7.5-1.9.7...
WordPress EWWW Image Optimizer plugin < 8.8.0 - Admin+ WebP File Rename and Deletion vulnerability
Admin+ WebP File Rename and Deletion vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin EWWW Image Optimizer versions 8.8.0...
WordPress Robin Image Optimizer plugin < 2.0.8 - Subscriber+ Plugin Settings Disclosure vulnerability
Subscriber+ Plugin Settings Disclosure vulnerability discovered by Abdullah Kareem in WordPress Plugin Robin image optimizer versions 2.0.8...
WordPress Image Optimizer plugin < 1.7.7 - Subscriber+ Attachment Metadata and Site Statistics Disclosure vulnerability
Subscriber+ Attachment Metadata and Site Statistics Disclosure vulnerability discovered by Artus KG in WordPress Plugin Image Optimizer by Elementor versions 1.7.7...
WordPress All in One Files Upload plugin < 2.0.17 - Subscriber+ Arbitrary Plugin Settings Update vulnerability
Subscriber+ Arbitrary Plugin Settings Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin All in One Files Upload versions 2.0.17...