52727 matches found
WordPress Wigi theme <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Wigi versions = 2.0.1...
WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Zainul Anwar Adi Putra in WordPress Plugin Church Admin versions = 5.1.1...
WordPress Payment Forms for Paystack plugin <= 4.0.5 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Muhan Luo in WordPress Plugin Payment Forms for Paystack versions = 4.0.5...
WordPress WP Umbrella plugin 2.24.2-2.26.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Anthony Green Antnation in WordPress Plugin WP Umbrella versions 2.24.2-2.26.2...
WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability
SQL Injection vulnerability discovered by manop55555 in WordPress Plugin Everest Backup versions = 2.3.12...
WordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by pajarori in WordPress Plugin Accordion versions = 3.0.6...
WordPress Arvow AI SEO Writer plugin <= 1.5.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by kai63001 in WordPress Plugin Arvow AI SEO Writer versions = 1.5.3...
WordPress Local Delivery Drivers for WooCommerce plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Zamaan in WordPress Plugin Local Delivery Drivers for WooCommerce versions = 3.0.0...
WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Septio Noerdiansyah in WordPress Plugin FluentCommunity versions = 2.7.5...
WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.1.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Vincent Sevkli in WordPress Plugin StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart versions = 2.1.1...
WordPress Cartify theme <= 1.3.0.1 - Account Takeover vulnerability
Account Takeover vulnerability discovered by Denver Jackson in WordPress Theme Cartify versions = 1.3.0.1...
WordPress Internal Link Optimiser plugin <= 5.3.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Internal Link Optimiser versions = 5.3.0...
WordPress iCARRY plugin <= 2.9 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Legion Hunter in WordPress Plugin iCARRY versions = 2.9...
WordPress WooCommerce Appointments plugin <= 5.3.8 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by adhikara13 in WordPress Plugin WooCommerce Appointments versions = 5.3.8...
WordPress SiteGuard WP Plugin plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin SiteGuard WP Plugin versions = 1.8.6...
NPM: crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
NPM: crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain vulnerability discovered by ? in WordPress Npm crypto-js versions 4.0.0...
NPM: Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure
NPM: Hono: memo retains SSR output across requests, leading to cross-user data disclosure vulnerability discovered by ? in WordPress Npm hono versions = 3.8.0, 4.12.34...
NPM: Hono: Proxy Helper does not remove response headers listed in the `Connection` header
NPM: Hono: Proxy Helper does not remove response headers listed in the Connection header vulnerability discovered by ? in WordPress Npm hono versions = 4.7.0, 4.12.34...
NPM: Hono: Algorithmic Complexity DoS in Language Middleware
NPM: Hono: Algorithmic Complexity DoS in Language Middleware vulnerability discovered by ? in WordPress Npm hono versions = 4.12.0, 4.12.34...
NPM: jsii-diff: Command Injection via npm: package argument
NPM: jsii-diff: Command Injection via npm: package argument vulnerability discovered by ? in WordPress Npm jsii-diff versions 1.131.0...
NPM: Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint
NPM: Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint vulnerability discovered by ? in WordPress Npm nuxt versions = 3.21.7, 3.21.10...
NPM: DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
NPM: DOMPurify: INPLACE hook removal leaves a detached subtree executable, causing XSS vulnerability discovered by ? in WordPress Npm dompurify versions = 3.4.12...
WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Alfath Marchdika Cahyatullah in WordPress Plugin AfterShip Tracking versions = 1.18.1...
WordPress SMEPay: UPI Gateway for WooCommerce plugin <= 1.0.5 - Payment Bypass vulnerability
Payment Bypass vulnerability discovered by Alexis Lafontaine in WordPress Plugin SMEPay: UPI Gateway for WooCommerce versions = 1.0.5...
WordPress AI for SEO plugin <= 2.4.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ali Osman ERBAS 0110m4n in WordPress Plugin AI for SEO versions = 2.4.2...
WordPress RealPress plugin <= 1.1.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Mukhlis Amien in WordPress Plugin RealPress versions = 1.1.2...
WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by 0xManticore in WordPress Plugin Profile Extra Fields by BestWebSoft versions = 1.3.5...
WordPress ReactPress plugin <= 3.4.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nguyen Duc Canh canhnguyen26 in WordPress Plugin ReactPress versions = 3.4.0...
WordPress WP Social Avatar plugin <= 1.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by muqsithbarru in WordPress Plugin WP Social Avatar versions = 1.5...
WordPress Blogfolio theme <=3.0.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Blogfolio versions =3.0.5...
WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Evan NR in WordPress Plugin Salon booking system versions = 10.30.26...
WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by daroo in WordPress Plugin Geo Mashup versions = 1.13.18...
WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Geo Mashup versions = 1.13.18...
WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability
SQL Injection vulnerability discovered by dutafi in WordPress Plugin If-So Dynamic Content Personalization versions = 1.10...
WordPress REST API Log plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Aydan Arabadzha in WordPress Plugin REST API Log versions = 1.7.1...
WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Uma Mo in WordPress Plugin MultiVendorX versions = 5.0.10...
WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Asim Alshaya in WordPress Plugin Active Products Tables for WooCommerce versions = 1.1.1...
WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by winky in WordPress Plugin WPJAM Basic versions = 7.0.2.1...
WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) plugin <= 1.0.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Bitcoin Lightning Payment Gateway for WooCommerce via CLINK versions = 1.0.7...
WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Visitor Traffic Real Time Statistics Pro versions = 11.10...
WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Visitor Traffic Real Time Statistics Pro versions = 11.10...
WordPress WP-Stats plugin <= 2.56 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by testoun in WordPress Plugin WP-Stats versions = 2.56...
WordPress Car Rental Manager plugin <= 1.3.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by V1t in WordPress Plugin Car Rental Manager versions = 1.3.7...
WordPress < 7.0.3 - SSRF vulnerability
SSRF vulnerability discovered by Andrew Mohawk in WordPress core versions 7.0.3...
WordPress < 7.0.3 - CSS Injection vulnerability
CSS Injection vulnerability discovered by Anthropic in WordPress core versions 7.0.3...
WordPress < 7.0.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Elio Gubser in WordPress core versions 7.0.3...
WordPress < 7.0.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by HDWSec in WordPress core versions 7.0.3...
WordPress < 7.0.3 - Stored XSS vulnerabiliity
Stored XSS vulnerabiliity discovered by Naveen S and Ajmal Moochingal in WordPress core versions 7.0.3...
WordPress Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ plugin <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Romain Deperne ang3L in WordPress Plugin Easy Accordion versions = 3.1.8...