52842 matches found
WordPress LayerSlider plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Plugin LayerSlider versions = 8.4.0...
WordPress YITH WooCommerce Ajax Search plugin <= 2.28.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Dthangws in WordPress Plugin YITH WooCommerce Ajax Search versions = 2.28.0...
WordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Profile Builder versions = 4.0.2...
WordPress TaxoPress plugin <= 3.53.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin TaxoPress versions = 3.53.0...
WordPress WP Store Locator plugin < 3.0.0 - Denial of Service Attack vulnerability
Denial of Service Attack vulnerability discovered by satokan in WordPress Plugin WP Store Locator versions 3.0.0...
WordPress Simply Schedule Appointments plugin <= 1.6.12.29 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mor Golan in WordPress Plugin Simply Schedule Appointments versions = 1.6.12.29...
WordPress Site Reviews plugin <= 8.3.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Site Reviews versions = 8.3.1...
WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.51 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Ultimate Addons for Contact Form 7 versions = 3.5.51...
WordPress Bookly plugin <= 28.2 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Bookly versions = 28.2...
WordPress Bookly plugin <= 28.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Bookly versions = 28.2...
WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Intrudify in WordPress Plugin Import and export users and customers versions = 2.5.2...
WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin ThemeREX Addons versions 2.45.0...
WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin ThemeREX Addons versions 2.45.0...
WordPress SureCart plugin <= 4.7.2 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Supakiad S. m3ez in WordPress Plugin SureCart versions = 4.7.2...
WordPress Parsi Date plugin <= 6.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin Parsi Date versions = 6.3...
WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Luke Eldridge in WordPress Plugin GiveWP versions = 4.16.9...
WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Intrudify in WordPress Plugin GiveWP versions = 4.16.9...
WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetEngine versions = 3.8.14.3...
WordPress Blocksy Companion plugin <= 2.1.55 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Asim Alshaya in WordPress Plugin Blocksy Companion versions = 2.1.55...
WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Asim Alshaya in WordPress Plugin ShortPixel Image Optimizer versions = 6.5.5...
WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetEngine versions = 3.8.14.3...
WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Abdelrhman Allam in WordPress Plugin GiveWP versions = 4.16.9...
WordPress King Addons for Elementor plugin <= 51.1.85 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin King Addons for Elementor versions = 51.1.85...
WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Asim Alshaya in WordPress Plugin Ad Inserter versions = 2.8.18...
WordPress Pixel Manager for WooCommerce plugin <= 1.69.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Pixel Manager for WooCommerce versions = 1.69.0...
WordPress Business Directory plugin <= 6.4.27 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Deva Parekh in WordPress Plugin Business Directory versions = 6.4.27...
WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin The Plus Addons for Elementor Page Builder Lite versions = 6.5.1...
WordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion vulnerability
Arbitrary Content Deletion vulnerability discovered by Matheo Beuve in WordPress Plugin Customer Reviews for WooCommerce versions = 5.120.0...
WordPress Simply Schedule Appointments plugin <= 1.6.12.31 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by rpgsec in WordPress Plugin Simply Schedule Appointments versions = 1.6.12.31...
WordPress Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Mor Golan in WordPress Plugin Blacklist Manager WooCommerce Anti-Fraud, Blacklist & Checkout Verification versions = 2.3.1...
WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin GiveWP versions = 4.16.9...
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by gueco in WordPress Plugin Client Invoicing by Sprout Invoices versions = 20.8.17...
WordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by sungbyeongchan in WordPress Plugin Webba Booking versions = 6.5.0...
WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Kadence WooCommerce Email Designer versions = 1.5.19.1...
WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin 10Web Booster – Website speed optimization, Cache & Page Speed optimizer versions = 2.33.6...
WordPress Go Live Update Urls plugin <= 7.0.8 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Go Live Update Urls versions = 7.0.8...
WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability discovered by Hippolyte Quere Hippie in WordPress Plugin CartFlows versions = 3.2.0...
WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability
Arbitrary File Download vulnerability discovered by Intrudify in WordPress Plugin NextGEN Gallery versions = 4.5.0...
WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Template Kit – Import versions = 1.0.16...
WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin WP Statistics versions = 14.16.13...
WordPress Paid Membership Subscriptions plugin < 3.1.0 - Unauthenticated reCAPTCHA Bypass vulnerability
Unauthenticated reCAPTCHA Bypass vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Paid Member Subscriptions versions 3.1.0...
WordPress Paymob for WooCommerce plugin < 4.1.14 - Unauthenticated Payment Bypass vulnerability
Unauthenticated Payment Bypass vulnerability discovered by Charles Vosburgh in WordPress Plugin Paymob for WooCommerce versions 4.1.14...
WordPress Forminator Forms plugin < 1.57.2.1 - Unauthenticated Poll Vote Limit Bypass vulnerability
Unauthenticated Poll Vote Limit Bypass vulnerability discovered by vuxvinh in WordPress Plugin Forminator versions 1.57.2.1...
WordPress Ninja Tables plugin < 5.2.17 - Unauthenticated Arbitrary Shortcode Execution vulnerability
Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Jakub Herman in WordPress Plugin Ninja Tables versions 5.2.17...
WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin All In One WP Security & Firewall versions = 5.4.8...
WordPress GTranslate plugin < 5.0.1 - Unauthenticated Arbitrary Shortcode Execution vulnerability
Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Jakub Herman in WordPress Plugin GTranslate versions 5.0.1...
WordPress Premium Packages plugin 7.0.0-7.2.0 - Unauthenticated PayPal Webhook Signature Verification Bypass vulnerability
Unauthenticated PayPal Webhook Signature Verification Bypass vulnerability discovered by Farid Narimanov in WordPress Plugin WPDM – Premium Packages versions 7.0.0-7.2.0...
WordPress Easy Hide Login plugin < 1.7 - Login Page Protection Bypass / Hidden URL Disclosure vulnerability
Login Page Protection Bypass / Hidden URL Disclosure vulnerability discovered by Huseyin Mertoglu in WordPress Plugin Easy Hide Login versions 1.7...
WordPress Newsletters plugin < 4.18.1 - Unauthenticated Subscriber Record Overwrite and PII Disclosure vulnerability
Unauthenticated Subscriber Record Overwrite and PII Disclosure vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Newsletters versions 4.18.1...
WordPress Payment Plugins for PayPal WooCommerce plugin < 2.0.27 - Unauthenticated Payment Hijacking vulnerability
Unauthenticated Payment Hijacking vulnerability discovered by m1w34p0n & krypt3d in WordPress Plugin Payment Plugins for PayPal WooCommerce versions 2.0.27...