WordPress Core <= 7.1 - Contributor+ Arbitrary Post Overwrite vulnerability

Contributor+ Arbitrary Post Overwrite vulnerability discovered by Anthropic in WordPress core versions = 7.1...

WordPress Core <= 7.1 - Contributor+ Draft and Pending Post Slug Disclosure vulnerability

Contributor+ Draft and Pending Post Slug Disclosure vulnerability discovered by hermanhms in WordPress core versions = 7.1...

WordPress Core <= 7.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jesse McNeil in WordPress core versions = 7.1...

WordPress Core <= 7.1 - Subscriber+ Comment and Note Reparenting vulnerability

Subscriber+ Comment and Note Reparenting vulnerability discovered by viridis in WordPress core versions = 7.1...

WordPress Core <= 7.1 - Contributor+ Path Traversal in REST Templates Controller vulnerability

Contributor+ Path Traversal in REST Templates Controller vulnerability discovered by Anthropic in WordPress core versions = 7.1...

WordPress Core <= 7.1 - Cross-Site Request Forgery to Theme Install and Preview vulnerability

Cross-Site Request Forgery to Theme Install and Preview vulnerability discovered by Paulos Yibelo, pwn.ai in WordPress core versions = 7.1...

WordPress Core <= 7.1 - Author+ Custom CSS Capability Bypass via XML-RPC vulnerability

Author+ Custom CSS Capability Bypass via XML-RPC vulnerability discovered by Ben Bidner in WordPress core versions = 7.1...

WordPress Core <= 7.1 - Admin+ Stored XSS in Custom Header Images vulnerability

Admin+ Stored XSS in Custom Header Images vulnerability discovered by Jeremy Felt in WordPress core versions = 7.1...

WordPress WP Recipe Maker plugin <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Saulo Rafael miquinho miquinho in WordPress Plugin WP Recipe Maker versions = 10.8.1...

WordPress Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin <= 1.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by UKO in WordPress Plugin Popup Maker versions = 1.24.0...

NPM: Svelte devalue: DoS via malformed input

NPM: Svelte devalue: DoS via malformed input vulnerability discovered by ? in WordPress Npm devalue versions 5.9.1...

WordPress CSS & JavaScript Toolbox plugin <= 12.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by Kyokito in WordPress Plugin CSS & JavaScript Toolbox versions = 12.0.6...

WordPress Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin <= 1.8.44 - Authenticated (Author+) SQL Injection vulnerability

Authenticated Author+ SQL Injection vulnerability discovered by VuxNx in WordPress Plugin Photo Gallery by 10Web versions = 1.8.44...

WordPress Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin <= 5.6.3 - Authenticated (Custom+) Insecure Direct Object Reference to Arbitrary Booking Deletion and Customer/Booking Data Disclosure vulnerability

Authenticated Custom+ Insecure Direct Object Reference to Arbitrary Booking Deletion and Customer/Booking Data Disclosure vulnerability discovered by skyv3il, Chirita Catalin-Andrei CC99IE, AmonRa, MrProperCTF in WordPress Plugin LatePoint versions = 5.6.3...

WordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by TruongLV1 From FPT Night Wolf in WordPress Plugin Filebird versions = 6.5.6...

WordPress Kubio AI Page Builder plugin <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Kubio AI Page Builder versions = 2.8.4...

WordPress NEX-Forms – Ultimate Forms Plugin for WordPress plugin <= 9.3.0 - Authenticated (Administrator+) SQL Injection vulnerability

Authenticated Administrator+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin NEX-Forms versions = 9.3.0...

WordPress WP Easy Pay – Payment and Donation Form Builder for Square plugin <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Deletion vulnerability discovered by Wordfence PRISM in WordPress Plugin WP EasyPay versions = 4.5.0...

WordPress Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers plugin <= 2.8.0 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read and Arbitrary File Deletion vulnerability

Authenticated Shop Manager+ Path Traversal to Arbitrary File Read and Arbitrary File Deletion vulnerability discovered by Wordfence PRISM in WordPress Plugin Store Exporter versions = 2.8.0...

WordPress VK All in One Expansion Unit plugin <= 9.118.0 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Kyokito, Athiwat Tiprasaharn Jitlada, Itthidej Aramsri Boeing777 in WordPress Plugin VK All in One Expansion Unit versions = 9.118.0...

WordPress Strong Testimonials plugin <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by pbsec in WordPress Plugin Strong Testimonials versions = 3.3.8...

WordPress Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plugin <= 1.8.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification / Site-Wide Template Takeover vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Post Modification / Site-Wide Template Takeover vulnerability discovered by Wordfence PRISM in WordPress Plugin Magazine Blocks versions = 1.8.6...

WordPress Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plugin <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Magazine Blocks versions = 1.8.6...

WordPress Foxtool All-in-One: Contact chat button, Custom login, Media optimize images plugin <= 2.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Settings Modification vulnerability discovered by Wordfence PRISM in WordPress Plugin Foxtool All-in-One versions = 2.5.3...

WordPress Filter Gallery plugin <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Modification vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Filter Gallery versions = 1.1.4...

WordPress Download Manager plugin <= 3.3.68 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure vulnerability

Insecure Direct Object Reference to Authenticated Contributor+ Sensitive Information Disclosure vulnerability discovered by pbsec in WordPress Plugin Download Manager versions = 3.3.68...

WordPress Divi theme 5.0-5.11.1 - Missing Authorization to Unauthenticated Arbitrary Registered Shortcode Execution vulnerability

Missing Authorization to Unauthenticated Arbitrary Registered Shortcode Execution vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os in WordPress Theme Divi versions 5.0-5.11.1...

NPM: ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion

Memory Exhaustion vulnerability discovered by ? in WordPress Npm exifreader versions = 4.41.0...

WordPress CheckView plugin < 2.3.2 - Administrator Account Creation via REST API Authentication Bypass vulnerability

Administrator Account Creation via REST API Authentication Bypass vulnerability discovered by Usama Arshad in WordPress Plugin CheckView Automated Testing versions 2.3.2...

WordPress Custom Fields for WooCommerce plugin < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal vulnerability

Unauthenticated Arbitrary File Deletion via Path Traversal vulnerability discovered by Mike Gozdiskowski in WordPress Plugin Custom Fields versions 1.5.1...

WordPress Single Sign On For TNG plugin < 2.2.0 - Unauthenticated Arbitrary Password Reset vulnerability

Unauthenticated Arbitrary Password Reset vulnerability discovered by moonge in WordPress Plugin Single Sign On For TNG versions 2.2.0...

WordPress Dataverse Integration plugin < 2.91 - Contributor+ Server-Side Template Injection (SSTI) to Information Disclosure vulnerability

Contributor+ Server-Side Template Injection SSTI to Information Disclosure vulnerability discovered by dangnosuy in WordPress Plugin Dataverse Integration versions 2.91...

WordPress WP Events Manager plugin < 2.2.5 - Unauthenticated Payment Bypass and Booking Status Update via IDOR vulnerability

Unauthenticated Payment Bypass and Booking Status Update via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin WP Events Manager versions 2.2.5...

WordPress Five Star Restaurant Reservations plugin < 2.7.23 - Unauthenticated Payment Bypass and Booking Confirmation via IDOR vulnerability

Unauthenticated Payment Bypass and Booking Confirmation via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Five Star Restaurant Reservations versions 2.7.23...

WordPress Ninja Forms plugin < 3.14.10 - Unauthenticated Arbitrary Shortcode Execution via Query-String Populated Field Default vulnerability

Unauthenticated Arbitrary Shortcode Execution via Query-String Populated Field Default vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin Ninja Forms versions 3.14.10...

WordPress miniOrange 2FA plugin < 6.2.7 - 2FA Bypass via Password-Only Second-Factor Rebinding vulnerability

2FA Bypass via Password-Only Second-Factor Rebinding vulnerability discovered by Artus KG in WordPress Plugin miniOrange's Google Authenticator versions 6.2.7...

WordPress Contest Gallery plugin < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_login vulnerability

Unauthenticated Login-Protection and 2FA Bypass via postcglogin vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Contest Gallery versions 30.0.7...

WordPress Event Booking Manager for WooCommerce (Pro) plugin <= 5.0.2 - Unauthenticated Price Manipulation vulnerability

Unauthenticated Price Manipulation vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Event Booking Manager for WooCommerce Pro versions = 5.0.2...

WordPress Newsletters plugin < 4.16 - Unauthenticated API Authentication Bypass via Type Juggling vulnerability

Unauthenticated API Authentication Bypass via Type Juggling vulnerability discovered by Haitam Lazaar in WordPress Plugin Newsletters versions 4.16...

WordPress Easy Booking plugin < 3.5.0 - Unauthenticated Minimum Booking Duration Bypass vulnerability

Unauthenticated Minimum Booking Duration Bypass vulnerability discovered by marim00 in WordPress Plugin Easy Booking – WooCommerce Booking & Reservation Plugin versions 3.5.0...

WordPress Iptanus File Upload plugin < 5.1.7 - File Overwrite via Race Condition vulnerability

File Overwrite via Race Condition vulnerability discovered by Luca Jungnickel in WordPress Plugin WordPress File Upload versions 5.1.7...

WordPress WPForms Lite plugin < 1.10.0.5 - Unauthenticated PayPal Webhook Forgery vulnerability

Unauthenticated PayPal Webhook Forgery vulnerability discovered by Sudhanshu Chauhan RedHunt Labs in WordPress Plugin Contact Form by WPForms versions 1.10.0.5...

NPM: Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site

NPM: Tina: Broken Access Control letting any TinaCloud user authorize against any self-hosted site vulnerability discovered by ? in WordPress Npm next-tinacms-azure versions = 15.0.0...

NPM: Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

NPM: Nuxt OG Image has unauthenticated SSRF via fonts.path URL parameter vulnerability discovered by ? in WordPress Npm nuxt-og-image versions = 6.0.2, 6.7.0...

WordPress ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin <= 6.5.5 - Authenticated (Author+) PHP Object Injection vulnerability

Authenticated Author+ PHP Object Injection vulnerability discovered by Josh Bolding in WordPress Plugin ShortPixel Image Optimizer versions = 6.5.5...

WordPress RT Mega Menu plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'pointermenuitem' Block Attribute vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg versions = 1.5.2...

WordPress Asset CleanUp: Page Speed Booster plugin <= 1.4.0.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Helder Gonçalves in WordPress Plugin Asset CleanUp: Page Speed Booster versions = 1.4.0.5...

WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetBlog versions = 2.4.10...

WordPress JetTabs plugin <= 2.3.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetTabs versions = 2.3.3.1...

WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Dthangws in WordPress Plugin Element Pack Elementor Addons versions = 8.8.3...