WordPress Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by nudien, nudien in WordPress Plugin Tourfic versions = 3.0.1...

WordPress Hide My WP Ghost – Security & Firewall plugin <= 7.0.12 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Pham Duc Anh in WordPress Plugin Hide My WP Ghost versions = 7.0.12...

WordPress Tainacan plugin <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read vulnerability

Authenticated Subscriber+ Path Traversal to Arbitrary File Read vulnerability discovered by Wordfence PRISM in WordPress Plugin Tainacan versions = 1.3.0...

WordPress Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin <= 10.31.9 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Maciej Komorowski in WordPress Plugin Salon booking system versions = 10.31.9...

WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin YITH WooCommerce Compare versions = 3.15.0...

WordPress Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin <= 4.11.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability

Authenticated Subscriber+ Arbitrary Shortcode Execution vulnerability discovered by Kuba in WordPress Plugin Slim SEO versions = 4.11.1...

WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by sanghyeok Kim Hamoyeah in WordPress Plugin ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes versions = 1.5.3...

WordPress WP Mail Logging plugin <= 1.17.0 - Authenticated (Administrator+) Sensitive Information Exposure in LIKE Wildcard in Personal Data Export Email vulnerability

Authenticated Administrator+ Sensitive Information Exposure in LIKE Wildcard in Personal Data Export Email vulnerability discovered by Sawyer in WordPress Plugin WP Mail Logging versions = 1.17.0...

WordPress SiteOrigin CSS plugin <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability

Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability discovered by Jakub Herman in WordPress Plugin SiteOrigin CSS versions = 1.6.7...

WordPress Tutor LMS – eLearning and online course solution plugin <= 4.0.8 - Authenticated (Subscriber+) Reflected DOM-Based Cross-Site Scripting vulnerability

Authenticated Subscriber+ Reflected DOM-Based Cross-Site Scripting vulnerability discovered by Sevada797 in WordPress Plugin Tutor LMS versions = 4.0.8...

WordPress WP Compress plugin <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint vulnerability

Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Compress versions = 7.25.00...

WordPress User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by whale120 in WordPress Plugin Profile Builder versions = 4.0.3...

WordPress WebberZone Top 10 — Popular Posts plugin <= 4.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Top 10 versions = 4.5.2...

WordPress Search Regex plugin <= 3.5 - Authenticated (Subscriber+) Remote Code Execution vulnerability

Authenticated Subscriber+ Remote Code Execution vulnerability discovered by R3D in WordPress Plugin Search Regex versions = 3.5...

WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning vulnerability

Unauthenticated Limited File Write / Cache Poisoning vulnerability discovered by Swayam Bhageria in WordPress Plugin 10Web Booster – Website speed optimization, Cache & Page Speed optimizer versions = 2.34.5...

WordPress Theme My Login plugin <= 7.2.1 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by R3D in WordPress Plugin Theme My Login versions = 7.2.1...

WordPress User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter vulnerability

Unauthenticated Privilege Escalation to 'role' Parameter vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Profile Builder versions = 4.0.3...

WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MDTF versions = 1.4.0...

WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability

Other vulnerability Type vulnerability discovered by Peter Tang in WordPress Plugin Booking and Rental Manager versions = 2.8.0...

WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by ssophiz in WordPress Plugin Simply Schedule Appointments versions = 1.6.12.35...

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.7 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Osman Hussein in WordPress Plugin ELEX WordPress HelpDesk & Customer Ticketing System versions = 3.3.7...

WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin WordLift versions = 3.54.15...

WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dzaku in WordPress Plugin AI Engine versions = 3.8.3...

WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetSmartFilters versions = 3.8.6...

WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin APIExperts Square for WooCommerce versions = 4.7.5...

WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ayukiab in WordPress Plugin Strong Testimonials versions = 3.3.12...

WordPress WP Map Block plugin <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Map Publish/Unpublish/Delete via set_status() and bulk() REST Endpoints vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Map Publish/Unpublish/Delete via setstatus and bulk REST Endpoints vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Map Block versions = 3.0.0...

WordPress HUSKY plugin <= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script vulnerability

Unauthenticated Sensitive Information Exposure in 'wooftmdata' Localized Script vulnerability discovered by Sawyer in WordPress Plugin HUSKY versions = 1.4.5...

WordPress WP Booking System plugin <= 2.1.0.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter vulnerability

Authenticated Administrator+ SQL Injection via 'orderby' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Booking System versions = 2.1.0.1...

WordPress User Registration & Membership plugin <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name vulnerability

Authenticated Subscriber+ Arbitrary Shortcode Execution via displayname vulnerability discovered by hashiramasenju333 in WordPress Plugin User Registration versions = 5.2.8...

WordPress My Calendar plugin <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute

Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute vulnerability discovered by daroo in WordPress Plugin My Calendar versions = 3.8.7...

WordPress Mang Board plugin <= 2.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Mang Board WP versions = 2.4.4...

WordPress Opti-Behavior plugin <= 1.9.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'targetUrl' Parameter vulnerability

Unauthenticated Stored DOM-Based Cross-Site Scripting via 'targetUrl' Parameter vulnerability discovered by Décio Brandão in WordPress Plugin Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights versions = 1.9.2.1...

WordPress Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin <= 1.58.1 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Theklis in WordPress Plugin Forminator versions = 1.58.1...

WordPress Mang Board plugin <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by poiri3r in WordPress Plugin Mang Board WP versions = 2.4.3...

WordPress Groundhogg — CRM, Newsletters, and Marketing Automation plugin <= 4.9.3 - Authenticated (Sales Representative+) Arbitrary File Deletion vulnerability

Authenticated Sales Representative+ Arbitrary File Deletion vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Groundhogg versions = 4.9.3...

WordPress FunnelKit – Funnel Builder Plugin for WooCommerce Checkout plugin <= 3.16.0.6 - Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability

Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability discovered by Kuba in WordPress Plugin Funnel Builder by FunnelKit versions = 3.16.0.6...

WordPress Backuply plugin <= 1.5.8 - Authenticated (Subscriber+) Second-Order SQL Injection via Restore to Privilege Escalation vulnerability

Authenticated Subscriber+ Second-Order SQL Injection via Restore to Privilege Escalation vulnerability discovered by daroo in WordPress Plugin Backuply – Backup, Restore, Migrate and Clone versions = 1.5.8...

WordPress Vitepos – Point of Sale (POS) for WooCommerce plugin <= 3.6.1 - Authenticated (Vendor+) SQL Injection vulnerability

Authenticated Vendor+ SQL Injection vulnerability discovered by John Ryan Albon in WordPress Plugin Vitepos versions = 3.6.1...

WordPress miniOrange OTP Login, Verification and SMS Notifications plugin <= 5.5.8 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Azgnt in WordPress Plugin miniorange otp verification versions = 5.5.8...

WordPress Customer Email Verification for WooCommerce plugin <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter vulnerability

Unauthenticated Privilege Escalation to 'algwcevverifyemail' Parameter vulnerability discovered by Wordfence PRISM in WordPress Plugin Email Verification for WooCommerce versions = 3.3.0...

WordPress PilotPress plugin <= 2.0.43 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameter vulnerability

Authenticated Subscriber+ Privilege Escalation via Account Takeover via 'username' Parameter vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin PilotPress versions = 2.0.43...

WordPress InstaWP Connect – 1-click WP Staging & Migration plugin <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by thevietronin in WordPress Plugin InstaWP Connect versions = 0.1.4.1...

WordPress Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter vulnerability

Authenticated Subscriber+ Privilege Escalation to 'reset-view' Parameter vulnerability discovered by elaprendiz1927 in WordPress Plugin Nexter Extension versions = 4.7.11...

WordPress Gwolle Guestbook plugin <= 5.1.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by crow in WordPress Plugin Gwolle Guestbook versions = 5.1.1...

WordPress Modula Image Gallery – Photo Grid & Video Gallery plugin <= 3.0.11 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Kuba in WordPress Plugin Modula Image Gallery versions = 3.0.11...

WordPress Colibri Page Builder plugin <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Tudor Lasuschevici Eutiphron in WordPress Plugin Colibri Page Builder versions = 1.0.390...

WordPress Klarna for WooCommerce plugin <= 4.13.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability

Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability discovered by Kuba in WordPress Plugin Klarna Payments for WooCommerce versions = 4.13.3...

WordPress RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin Feedzy versions = 5.2.11...

WordPress Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin <= 1.58.1 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Jakub Herman in WordPress Plugin Forminator versions = 1.58.1...