Yoast SEO <= 9.1 - Authenticated Race Condition

According to the changelog, "Race Condition which leads to command execution, by users with SEO Manager roles."...

Multi Step Form <= 1.2.5 - Cross-Site Scripting (XSS)

The Multi Step Form WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Chained Quiz <= 1.0.8 - Unauthenticated SQL Injection

WordPress Plugin Plugin Chained Quiz before 1.0.9 allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters. Technical details: Chained Quiz appears to be vulnerable to time-based SQL-Injection. The issue lies on the "$answer" backend variable...

Geo Mashup <= 1.10.3 - Unspecified Cross-Site Scripting (XSS)

The Geo Mashup WordPress plugin was affected by an Unspecified Cross-Site Scripting XSS security vulnerability...

Ninja Forms < 3.3.9 - Insufficient Restrictions during Export Personal Data requests

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by an Insufficient Restrictions during Export Personal Data requests security vulnerability...

wpForo Forum <= 1.4.11 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Version 1.4.11, and below, of the wpForo Forum WordPress Plugin were found to be vulnerable to Reflected Cross-Site Scripting XSS. The vulnerability was due to the Plugin using the $SERVER'REQUESTURI' PHP variable to create a URL string that was later output within HTML without any output encodin...

Tagregator <= 0.6 - Stored XSS

The Tagregator WordPress plugin was affected by a Stored XSS security vulnerability...

Ninja Forms <= 3.2.13 - Cross-Site Scripting (XSS)

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Multiple Mediaburst/Clockwork Plugins - Cross-Site Scripting (XSS)

Reflected XSS via GET parameter "to". Vulnerable Plugins: ------------------------------------------ 1. Clockwork Free and Paid SMS Notifications URL: https://wordpress.org/plugins/mediaburst-email-to-sms/ Version 2.0.3 | By Clockwork 2. Two-Factor Authentication - Clockwork SMS URL:...

Simple Login Log <= 1.1.0 - Authenticated SQL Injection

The Simple Login Log WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

MailChimp for WordPress <= 4.1.6 - Authenticated Cross-Site Scripting (XSS)

Usage of the output of addqueryarg without escaping in various places in the WordPress Backend leads to reflected XSS vulnerability. PoC URL/wp-admin/admin.php?page=mailchimp-for-wp-integrations&"...

WP Jobs <= 1.4 - Authenticated SQL Injection

The WP Jobs WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

WordPress 3.3-4.7.4 - Large File Upload Error XSS

...

Nelio Ab Testing < 4.6.4 - CSRF

The Nelio AB Testing WordPress plugin was affected by a CSRF security vulnerability...

WordPress 4.2-4.7.2 - Press This CSRF DoS

...

Corner Ad < 1.0.8 - XSS

The Corner Ad WordPress plugin was affected by a XSS security vulnerability...

WordPress 4.3.0-4.7.1 - Cross-Site Scripting (XSS) in posts list table

...

Stop User Enumeration 1.3.5-1.3.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The Stop User Enumeration WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/?author=1...

WordPress 4.2-4.5.2 - Authenticated Attachment Name Stored XSS

...

WordPress 4.5.2 - Redirect Bypass

...

WordPress 2.6.0-4.5.2 - Unauthorized Category Removal from Post

...

WordPress <= 4.5.1 - Pupload Same Origin Method Execution (SOME)

Description Affects 'wp-includes/js/plupload/plupload.flash.swf'...

Echosign <= 1.1 - Reflected Cross-Site Scripting (XSS)

The Echo Sign WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

Music Store <= 1.0.41 - Cross-Site Scripting (XSS)

The Music Store – WordPress eCommerce WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Booking Calendar Contact Form < 1.0.24 - XSS & SQL Injection

The Booking Calendar Contact Form WordPress plugin was affected by a XSS & SQL Injection security vulnerability...

WordPress 3.7-4.4.1 - Open Redirect

...

WordPress 3.7-4.4 - Authenticated Cross-Site Scripting (XSS)

PoC http://www.example.com/wp-admin/customize.php?theme= source: https://twitter.com/brutelogic/status/685105483397619713...

GoCodes <= 1.3.5 - Authenticated XSS & Blind SQL Injection

The gocodes WordPress plugin was affected by an Authenticated XSS & Blind SQL Injection security vulnerability...

Captain Slider 1.0.6 - Cross-Site Scripting (XSS)

The captain-slider WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Navis DocumentCloud 0.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The navis-documentcloud WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...

Googmonify <= 0.5.1 - CSRF & XSS

The Googmonify WordPress plugin was affected by a CSRF & XSS security vulnerability...

Events Manager < 5.6 - Cross-Site Scripting (XSS) & Code Injection

The Events Manager WordPress plugin was affected by a Cross-Site Scripting XSS & Code Injection security vulnerability...

NewStatPress <= 1.0.4 - SQL Injection

The Search functionality is susceptible to a SQL Injection attack due to usage of user input without sanitation. In particular, at line 98 of 'includes/nspsearch.php'. Utilising a specially crafted SQL query, we can trigger disclosure of user hashes through an IMG tag as the data channel. PoC The...

Powerplay Gallery - Arbitrary File Upload & SQL Injection

The wp-powerplaygallery WordPress plugin was affected by an Arbitrary File Upload & SQL Injection security vulnerability...

Easy2Map <= 1.24 - SQL Injection

The Function.php file uses sprintf to format queries being sent to the database, this doesn't provide proper sanitisation of user input or properly parameterises the query. PoC $ sqlmap -u 'http://www.example.com/wp-admin/admin-ajax.php' --data="mapID=11='+or+1%3D%3D1%3B=e2mimgsavemapname"...

WP Fastest Cache < 0.8.3.5 - Multiple CSRF

The WP Fastest Cache WordPress plugin was affected by a Multiple CSRF security vulnerability...

GigPress <= 2.3.8 - Authenticated SQL Injection

The GigPress WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

WordPress <= 4.2 - Unauthenticated Stored Cross-Site Scripting (XSS)

...

Lattice < 1.1.4 - Unspecified XSS

The lattice WordPress theme was affected by an Unspecified XSS security vulnerability...

Wpml < 3.1.9 - XSS

The wpml WordPress plugin was affected by a XSS security vulnerability...

Google Doc Embedder <= 2.5.18 - Cross-Site Scripting (XSS)

The Google Doc Embedder WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Photo Gallery <= 1.2.5 - Unrestricted File Upload

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin was affected by an Unrestricted File Upload security vulnerability...

Pictobrowser Gallery <= 0.3.1 - Multiple CSRF

Plugin is still affected and has been closed...

Simple Sticky Footer < 1.3.3 - Multiple CSRF

The Simple Sticky Footer WordPress plugin was affected by a Multiple CSRF security vulnerability...

VideoWhisper Video Presentation 3.25 - vp/c_login.php room_name Parameter Reflected XSS

The VideoWhisper Video Presentation WordPress plugin was affected by a vp/clogin.php roomname Parameter Reflected XSS security vulnerability...

LightSpeed - Valums Uploader Shell Upload Exploit

The lightspeed WordPress theme was affected by a Valums Uploader Shell Upload Exploit security vulnerability...

BookX 1.7 - includes/bookx_export.php file Parameter Remote Path Traversal File Access

The bookx WordPress plugin was affected by an includes/bookxexport.php file Parameter Remote Path Traversal File Access security vulnerability...

bib2html 0.9.3 - /OSBiB/create/index.php styleShortName Parameter XSS

The bib2html WordPress plugin was affected by a /OSBiB/create/index.php styleShortName Parameter XSS security vulnerability...

Lazyest Gallery <= 1.1.20 - EXIF Script Insertion

The Lazyest Gallery WordPress plugin was affected by an EXIF Script Insertion security vulnerability...

JS MultiHotel 2.2.1 - refreshDate.php roomid Parameter Reflected XSS

The js-multihotel WordPress plugin was affected by a refreshDate.php roomid Parameter Reflected XSS security vulnerability...