49993 matches found
WordPress Cost Calculator Builder PRO plugin <= 4.0.3 - Unauthenticated Remote Code Execution vulnerability
Unauthenticated Remote Code Execution vulnerability discovered by Nox Axter in WordPress Plugin Cost Calculator Builder Pro versions = 4.0.3...
WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Missing Authorization to Unauthenticated Privilege Escalation vulnerability
Missing Authorization to Unauthenticated Privilege Escalation vulnerability discovered by kr0d in WordPress Plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light versions = 2.4.37...
WordPress MountDev AI MCP Connector for WordPress plugin <= 1.6.1 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by AeonRisk in WordPress Plugin MountDev AI MCP Connector for WordPress versions = 1.6.1...
WordPress SAML Single Sign On – SSO Login plugin <= 5.4.4 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by Supakiad S. m3ez in WordPress Plugin SAML SP Single Sign On versions = 5.4.4...
WordPress WPForms Pro plugin <= 1.10.1.1 - Unauthenticated Arbitrary File Write vulnerability
Unauthenticated Arbitrary File Write vulnerability discovered by lhking in WordPress Plugin WPForms Pro versions = 1.10.1.1...
WordPress EventON Action User plugin <= 2.5.14 - Missing Authorization to Unauthenticated Privilege Escalation vulnerability
Missing Authorization to Unauthenticated Privilege Escalation vulnerability discovered by Vincent Szopa bioflavonoid in WordPress Plugin EventON Action User versions = 2.5.14...
WordPress SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover vulnerability
Unauthenticated Authentication Bypass to Account Takeover vulnerability discovered by Civitasmass in WordPress Plugin SMS Alert Order Notifications versions = 3.9.7...
WordPress WP Password Policy plugin <= 3.7.1 - Authenticated (Subscriber+) Privilege Escalation vulnerability
Authenticated Subscriber+ Privilege Escalation vulnerability discovered by zickzick2 in WordPress Plugin WP Password Policy versions = 3.7.1...
WordPress Eazy Plugin Manager – Powerful Plugin Management Solution for WordPress plugin <= 4.4.1 - Authenticated (Subscriber+) Privilege Escalation vulnerability
Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Nia in WordPress Plugin Eazy Plugin Manager versions = 4.4.1...
WordPress TrueBooker plugin < 1.2.4 - Unauthenticated Account Takeover vulnerability
Unauthenticated Account Takeover vulnerability discovered by Pedro Pinho in WordPress Plugin TrueBooker versions 1.2.4...
WordPress BookingPress Pro plugin < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering vulnerability
Unauthenticated Customer PII Disclosure and Booking Tampering vulnerability discovered by Kolja Zuelsdorf in WordPress Plugin BookingPress Appointment Booking Pro versions 5.7.3...
WordPress Tutor LMS plugin < 4.0.0 - Subscriber+ Cross-Course Q&A Content Disclosure and Reply Injection vulnerability
Subscriber+ Cross-Course Q&A Content Disclosure and Reply Injection vulnerability discovered by Sanjar Tulkinov in WordPress Plugin Tutor LMS versions 4.0.0...
WordPress Essential Addons for Elementor plugin < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure vulnerability
Unauthenticated Draft/Private WooCommerce Product Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Essential Addons for Elementor versions 6.6.10...
WordPress WP Delicious plugin < 1.10.2 - Unauthenticated Arbitrary Post Meta Update vulnerability
Unauthenticated Arbitrary Post Meta Update vulnerability discovered by Pedro Pinho in WordPress Plugin WP Delicious versions 1.10.2...
WordPress Essential Addons for Elementor plugin < 6.6.10 - Lite < 6.6.10 - Contributor+ Stored XSS vulnerability
WordPress Essential Addons for Elementor plugin 6.6.10 - Lite 6.6.10 - Contributor+ Stored XSS vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Essential Addons for Elementor versions 6.6.10...
WordPress WP Travel plugin < 11.8.1 - Subscriber+ Booking PII Disclosure vulnerability
Subscriber+ Booking PII Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin WP Travel versions 11.8.1...
WordPress Animation Addons for Elementor plugin < 2.7.0 - Author+ Stored XSS vulnerability
Author+ Stored XSS vulnerability discovered by Vaibhav Narkhede in WordPress Plugin Animation Addons for Elementor versions 2.7.0...
WordPress Fluent Forms plugin < 6.2.6 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin FluentForm versions 6.2.6...
WordPress Search Atlas SEO plugin < 2.6.12 - Subscriber+ Google Indexing API Access vulnerability
Subscriber+ Google Indexing API Access vulnerability discovered by LevinityCyber in WordPress Plugin Search Atlas SEO versions 2.6.12...
WordPress RegistrationMagic plugin < 6.0.9.4 - Unauthenticated Form Submission and User Profile Modification vulnerability
Unauthenticated Form Submission and User Profile Modification vulnerability discovered by Jonatan Buskila in WordPress Plugin RegistrationMagic versions 6.0.9.4...
WordPress RegistrationMagic plugin < 6.0.9.4 - Unauthenticated Form Submission Disclosure vulnerability
Unauthenticated Form Submission Disclosure vulnerability discovered by Jonatan Buskila in WordPress Plugin RegistrationMagic versions 6.0.9.4...
WordPress LifterLMS plugin < 10.0.10 - Subscriber+ Sensitive Information Disclosure vulnerability
Subscriber+ Sensitive Information Disclosure vulnerability discovered by Daniel Púa - devploit in WordPress Plugin LifterLMS versions 10.0.10...
WordPress GiveWP plugin < 4.16.3 - GiveWP Worker+ Stored XSS vulnerability
GiveWP Worker+ Stored XSS vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin GiveWP versions 4.16.3...
WordPress LifterLMS plugin <= 10.0.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Mustafa Ahmed in WordPress Plugin LifterLMS versions = 10.0.9...
WordPress WP Hotel Booking plugin < 2.3.2 - Hotel Manager+ SQL Injection vulnerability
Hotel Manager+ SQL Injection vulnerability discovered by Mokksh Parekh in WordPress Plugin WP Hotel Booking versions 2.3.2...
WordPress Bit Form plugin < 3.1.2 - Unauthenticated Inactive Form Submission vulnerability
Unauthenticated Inactive Form Submission vulnerability discovered by Charles Vosburgh in WordPress Plugin Bit Form versions 3.1.2...
WordPress Sync Post With Other Site plugin < 1.9.3 - Contributor+ Arbitrary Page Creation/Modification vulnerability
Contributor+ Arbitrary Page Creation/Modification vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Sync Post With Other Site versions 1.9.3...
WordPress Easy Appointments plugin <= 3.12.26 - Subscriber+ Sensitive Information Disclosure vulnerability
Subscriber+ Sensitive Information Disclosure vulnerability discovered by Phyo Ko Ko in WordPress Plugin Easy Appointments versions = 3.12.26...
WordPress Easy Appointments plugin <= 3.12.26 - Contributor+ Customer Data Disclosure vulnerability
Contributor+ Customer Data Disclosure vulnerability discovered by Mustafa Ahmed in WordPress Plugin Easy Appointments versions = 3.12.26...
WordPress Easy Appointments plugin <= 3.12.26 - Contributor+ Appointment Data Disclosure & Modification vulnerability
Contributor+ Appointment Data Disclosure & Modification vulnerability discovered by Youssef massoudi in WordPress Plugin Easy Appointments versions = 3.12.26...
WordPress Easy Appointments plugin <= 3.12.26 - Subscriber+ Customer PII Disclosure vulnerability
Subscriber+ Customer PII Disclosure vulnerability discovered by Mark Moore in WordPress Plugin Easy Appointments versions = 3.12.26...
WordPress Easy Appointments plugin <= 3.12.26 - Contributor+ Connection Deletion vulnerability
Contributor+ Connection Deletion vulnerability discovered by WEI HSIANG WANG in WordPress Plugin Easy Appointments versions = 3.12.26...
WordPress MailerPress – Newsletter, email marketing & AI automation plugin <= 1.5.0 - Missing Authorization to Unauthenticated Arbitrary Modification vulnerability
Missing Authorization to Unauthenticated Arbitrary Modification vulnerability discovered by Jakub Lipiński A3RES in WordPress Plugin MailerPress versions = 1.5.0...
WordPress Subscriptions for WooCommerce plugin <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation vulnerability
Missing Authorization to Authenticated Shop Manager+ Arbitrary Plugin Installation vulnerability discovered by Wordfence PRISM in WordPress Plugin Subscriptions for WooCommerce versions = 2.0.0...
NPM: mathlive's Lack of Escaping of HTML allows for XSS
NPM: mathlive's Lack of Escaping of HTML allows for XSS vulnerability discovered by ? in WordPress Npm mathlive versions = 0.109.2...
WordPress Improved Save Button plugin <= 1.2.1 - Authenticated (Author+) Second-Order SQL Injection vulnerability
Authenticated Author+ Second-Order SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Improved Save Button versions = 1.2.1...
NPM: swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies
NPM: swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies vulnerability discovered by ? in WordPress Npm swagger-typescript-api versions = 13.12.1...
NPM: swagger-typescript-api vulnerable to code injection via unescaped enum string values
NPM: swagger-typescript-api vulnerable to code injection via unescaped enum string values vulnerability discovered by ? in WordPress Npm swagger-typescript-api versions = 13.12.1...
NPM: swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template
NPM: swagger-typescript-api vulnerable to code injection via unescaped servers0.url in axios http-client template vulnerability discovered by ? in WordPress Npm swagger-typescript-api versions = 13.12.1...
NPM: swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`
NPM: swagger-typescript-api vulnerable to Server-Side Request Forgery via spec $ref vulnerability discovered by ? in WordPress Npm swagger-typescript-api versions = 13.12.1...
NPM: swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template
NPM: swagger-typescript-api vulnerable to code injection via unescaped servers0.url in fetch http-client template vulnerability discovered by ? in WordPress Npm swagger-typescript-api versions = 13.12.1...
NPM: swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`
NPM: swagger-typescript-api vulnerable to authorization-token exfiltration via spec $ref vulnerability discovered by ? in WordPress Npm swagger-typescript-api versions = 13.12.1...
WordPress المنتور فارسی plugin <= 2.8.1 - Unauthenticated Price Manipulation vulnerability
Unauthenticated Price Manipulation vulnerability discovered by Chiao-Lin Yu Steven Meow in WordPress Plugin المنتور فارسی versions = 2.8.1...
WordPress AnsPress – Question and answer plugin 4.4.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Taylsec in WordPress Plugin AnsPress – Question and answer versions 4.4.4...
WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Riyas M S in WordPress Plugin myCred versions = 3.1.2...
WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Spider Analyser WordPress搜索引擎蜘蛛分析插件 versions = 2.1.3...
WordPress Ultimate Addons for Elementor plugin <= 1.45.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin Ultimate Addons for Elementor versions = 1.45.2...
WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by TurboNexic in WordPress Plugin Colissimo Officiel : Méthodes de livraison pour WooCommerce versions = 2.10.0...
WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Abdullah Kareem "cyberkareem" in WordPress Plugin Gutenberg Blocks by Kadence Blocks versions = 3.7.8...