WordPress Events Manager – Calendar, Bookings, Tickets, and more! plugin <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion vulnerability

Authenticated Administrator+ Local File Inclusion vulnerability discovered by Wordfence PRISM in WordPress Plugin Events Manager versions = 7.3.7.4...

WordPress ManageWP Worker plugin < 4.9.37 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Jakub Herman in WordPress Plugin ManageWP Worker versions 4.9.37...

WordPress FiboSearch plugin < 1.34.1 - Unauthenticated Password-Protected Product Information Disclosure vulnerability

Unauthenticated Password-Protected Product Information Disclosure vulnerability discovered by Duy Tran in WordPress Plugin FiboSearch versions 1.34.1...

WordPress Limit Login Attempts Security plugin < 3.3.5 - Username Denylist Bypass vulnerability

Username Denylist Bypass vulnerability discovered by Artus KG in WordPress Plugin Limit Login Attempts Reloaded versions 3.3.5...

WordPress All-in-One WP Migration and Backup plugin <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution vulnerability

Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution vulnerability discovered by Jack Taylor in WordPress Plugin All-in-One WP Migration versions = 7.109...

WordPress ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import 'plugin <wp_option>' Nodes vulnerability

Authenticated Shop Manager+ Privilege Escalation to WXR Import 'plugin ' Nodes vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin ShopEngine versions = 4.9.4...

WordPress MetForm plugin <= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf_form_id' Widget Setting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'mfformid' Widget Setting vulnerability discovered by Jonah Burgess CryptoCat in WordPress Plugin Metform versions = 4.1.8...

WordPress eCommerce Product Catalog plugin <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'style' Shortcode Attribute vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin eCommerce Product Catalog versions = 3.5.10...

NPM: browse-mcp has an arbitrary file write via unconfined download and state paths

NPM: browse-mcp has an arbitrary file write via unconfined download and state paths vulnerability discovered by ? in WordPress Npm browse-mcp versions = 0.8.1...

WordPress Newsletters plugin <= 4.17 - Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter vulnerability

Authenticated Author+ Arbitrary Modification via 'newslettersmailinglistsroles' POST Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Newsletters versions = 4.17...

WordPress My Agile Privacy® plugin <= 3.3.6 - Missing Authorization to Unauthenticated Plugin Settings Modification via map_missing_cookie_shield / map_check_consent_mode_status AJAX Actions vulnerability

Missing Authorization to Unauthenticated Plugin Settings Modification via mapmissingcookieshield / mapcheckconsentmodestatus AJAX Actions vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin My Agile Privacy versions = 3.3.6...

WordPress Media Sweep plugin <= 1.1.3 - Authenticated (Administrator+) SQL Injection via 'fields' Parameter vulnerability

Authenticated Administrator+ SQL Injection via 'fields' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Media Sweep – WordPress Media Cleaner versions = 1.1.3...

NPM: urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

NPM: urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage vulnerability discovered by ? in WordPress Npm urllib versions = 2.44.0...

NPM: pickem vulnerable to terminal escape-sequence injection via unsanitized item text

NPM: pickem vulnerable to terminal escape-sequence injection via unsanitized item text vulnerability discovered by ? in WordPress Npm pickem versions 1.0.7...

WordPress Drag and Drop Multiple File Upload for WooCommerce plugin < 1.1.8 - Unauthenticated File Deletion via Nonce Oracle vulnerability

Unauthenticated File Deletion via Nonce Oracle vulnerability discovered by RealKingEngine ISAL FRAMEWORK in WordPress Plugin Drag and Drop Multiple File Upload for WooCommerce versions 1.1.8...

WordPress Insert or Embed Articulate Content into WordPress plugin <= 4.3000000027 - Editor+ Arbitrary File Upload vulnerability

Editor+ Arbitrary File Upload vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Insert or Embed Articulate Content into WordPress versions = 4.3000000027...

WordPress MStore API plugin < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOR vulnerability

Subscriber+ Order and Customer PII Disclosure via IDOR vulnerability discovered by Sai Praneeth Koti in WordPress Plugin MStore API versions 4.21.0...

WordPress Geo My WP plugin < 4.5.5.3 - Subscriber+ Arbitrary Geolocation Record Modification and Deletion via IDOR vulnerability

Subscriber+ Arbitrary Geolocation Record Modification and Deletion via IDOR vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin GEO my WordPress versions 4.5.5.3...

WordPress Simply Schedule Appointments plugin < 1.6.12.11 - Contributor+ Sensitive Data Disclosure via Admin Shortcode vulnerability

Contributor+ Sensitive Data Disclosure via Admin Shortcode vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin Simply Schedule Appointments versions 1.6.12.11...

WordPress LatePoint plugin < 5.6.8 - Unauthenticated Booking Object Mass Assignment via Public Booking Funnel vulnerability

Unauthenticated Booking Object Mass Assignment via Public Booking Funnel vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin LatePoint versions 5.6.8...

WordPress Hotel Booking Lite plugin < 6.2.3 - Subscriber+ Customer Data Modification via IDOR vulnerability

Subscriber+ Customer Data Modification via IDOR vulnerability discovered by Haitam Lazaar in WordPress Plugin Hotel Booking Lite versions 6.2.3...

WordPress RealHomes Memberships plugin < 3.1.0 - Subscriber+ Membership Payment Bypass vulnerability

Subscriber+ Membership Payment Bypass vulnerability discovered by Pablo González and Fran Ramírez in WordPress Plugin RealHomes Memberships versions 3.1.0...

WordPress YayPricing plugin < 3.5.7 - Subscriber+ Pricing Configuration Modification and Coupon Code Disclosure vulnerability

Subscriber+ Pricing Configuration Modification and Coupon Code Disclosure vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin YayPricing versions 3.5.7...

WordPress TaxoPress plugin < 3.51.0 - Contributor+ Private Post Disclosure via IDOR vulnerability

Contributor+ Private Post Disclosure via IDOR vulnerability discovered by Duy Tran in WordPress Plugin TaxoPress versions 3.51.0...

WordPress Subscriptions for WooCommerce plugin < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation vulnerability

Shop Manager+ Arbitrary Plugin Installation vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Subscriptions for WooCommerce versions 2.0.1...

WordPress RegistrationMagic plugin < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification vulnerability

Unauthenticated Payment Bypass via Amount-Blind PayPal Verification vulnerability discovered by Pedro Pinho in WordPress Plugin RegistrationMagic versions 6.0.9.5...

WordPress Subscriptions for WooCommerce plugin < 2.0.1 - Payment Bypass via Attacker-Supplied PayPal Capture Token vulnerability

Payment Bypass via Attacker-Supplied PayPal Capture Token vulnerability discovered by Pedro Pinho in WordPress Plugin Subscriptions for WooCommerce versions 2.0.1...

WordPress Subscriptions for WooCommerce plugin < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR vulnerability

Subscriber+ Subscription Detail Disclosure via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Subscriptions for WooCommerce versions 2.0.1...

WordPress WP Hotel Booking plugin < 2.3.2 - Unauthenticated PayPal Payment Bypass vulnerability

Unauthenticated PayPal Payment Bypass vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin WP Hotel Booking versions 2.3.2...

WordPress WP Hotel Booking plugin < 2.3.3 - Unauthenticated Payment Bypass via Price Manipulation vulnerability

Unauthenticated Payment Bypass via Price Manipulation vulnerability discovered by reconnaissance in WordPress Plugin WP Hotel Booking versions 2.3.3...

WordPress Password Protected plugin < 2.8.4 - Unauthenticated Sensitive Information Exposure via REST API vulnerability

Unauthenticated Sensitive Information Exposure via REST API vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Password Protected versions 2.8.4...

WordPress Visualizer: Tables and Charts Manager plugin < 4.0.6 - Contributor+ Server-Side Request Forgery via JSON Import vulnerability

Contributor+ Server-Side Request Forgery via JSON Import vulnerability discovered by creeperkirby in WordPress Plugin Visualizer versions 4.0.6...

WordPress Simple Membership plugin < 4.7.7 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification vulnerability

Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Simple Membership versions 4.7.7...

WordPress Themify Builder plugin <= 7.8.0 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX Action vulnerability

Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tbupdateolddata' AJAX Action vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Themify Builder versions = 7.8.0...

WordPress AutomatorWP plugin <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Action vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Information Disclosure via automatorwpconvertkitgetforms AJAX Action vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin AutomatorWP versions = 5.8.4...

WordPress WPeMatico RSS Feed Fetcher plugin <= 2.8.24 - Authenticated (Subscriber+) Privilege Escalation via Arbitrary Option Update to wpematico_import_settings admin_action vulnerability

Authenticated Subscriber+ Privilege Escalation via Arbitrary Option Update to wpematicoimportsettings adminaction vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin WPeMatico RSS Feed Fetcher versions = 2.8.24...

WordPress AutomatorWP plugin <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_campaign_monitor_get_lists AJAX Action vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Information Disclosure via automatorwpcampaignmonitorgetlists AJAX Action vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin AutomatorWP versions = 5.8.4...

WordPress Podcast Player plugin < 8.3.1 - Unauthenticated Server-Side Request Forgery vulnerability

Unauthenticated Server-Side Request Forgery vulnerability discovered by ApogeeBytes in WordPress Plugin Podcast Player versions 8.3.1...

WordPress WP Crowdfunding plugin < 2.2.1 - Subscriber+ Order Data Disclosure via IDOR vulnerability

Subscriber+ Order Data Disclosure via IDOR vulnerability discovered by Sajjad Haqi in WordPress Plugin WP Crowdfunding versions 2.2.1...

WordPress Events Made Easy plugin < 3.1.2 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Haitam Lazaar in WordPress Plugin Events Made Easy versions 3.1.2...

WordPress Checkimate plugin <= 1.0.13 - Unauthenticated License Deactivation via Hardcoded Secret vulnerability

Unauthenticated License Deactivation via Hardcoded Secret vulnerability discovered by Pedro Pinho in WordPress Plugin Checkimate versions = 1.0.13...

WordPress Zportals plugin < 6.3.4 - Subscriber+ Arbitrary File Upload vulnerability

Subscriber+ Arbitrary File Upload vulnerability discovered by Mike Gozdiskowski in WordPress Plugin Zportals versions 6.3.4...

WordPress The GDPR Framework plugin < 2.4.0 - Unauthenticated Consent Record Forgery and Do Not Sell Requests Spam vulnerability

Unauthenticated Consent Record Forgery and Do Not Sell Requests Spam vulnerability discovered by Pedro Pinho in WordPress Plugin GDPR Framework By Data443 versions 2.4.0...

WordPress MagicForm plugin <= 0.1.3 - Unauthenticated Arbitrary File Upload to RCE vulnerability

Unauthenticated Arbitrary File Upload to RCE vulnerability discovered by 0xBassia in WordPress Plugin MagicForm versions = 0.1.3...

WordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.8.0 - Unauthenticated Image Attachment Disclosure via IDOR vulnerability

Unauthenticated Image Attachment Disclosure via IDOR vulnerability discovered by Shivamani Vastrala in WordPress Plugin PeproDev WooCommerce Receipt Uploader versions = 2.8.0...

WordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.8.0 - Unauthenticated Order Receipt Tampering via IDOR vulnerability

Unauthenticated Order Receipt Tampering via IDOR vulnerability discovered by Lyris Vale in WordPress Plugin PeproDev WooCommerce Receipt Uploader versions = 2.8.0...

WordPress Tutor LMS plugin < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass vulnerability

Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass vulnerability discovered by John Umoru in WordPress Plugin Tutor LMS versions 3.9.14...

WordPress InPost PL plugin < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking vulnerability

Unauthenticated WooCommerce Order Parcel-Locker Hijacking vulnerability discovered by Pedro Pinho in WordPress Plugin InPost PL versions 1.9.1...

WordPress CoCart plugin < 4.9.0 - Unauthenticated Arbitrary Price Manipulation vulnerability

Unauthenticated Arbitrary Price Manipulation vulnerability discovered by hoangphuong in WordPress Plugin CoCart – Headless ecommerce versions 4.9.0...

WordPress f4 Post Tree plugin < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification vulnerability

Subscriber+ Arbitrary Post Parent/Menu Order Modification vulnerability discovered by Mustafa Ahmed in WordPress Plugin F4 Post Tree versions 2.0.5...