Ninja Forms <= 2.8.9 - Unspecified Issue Affecting Admin Users

This version includes a fix for a potential security vulnerability for admin users...

Google Document Embedder <= 2.5.14 - SQL Injection

The Google Doc Embedder WordPress plugin was affected by a SQL Injection security vulnerability...

Enfold < 3.0.1 - Unspecified Issue

The enfold WordPress theme was affected by an Unspecified Issue security vulnerability...

All-in-One Event Calendar Plugin 1.4 & 1.5 Multiple XSS

The All-in-One Event Calendar WordPress plugin was affected by security vulnerability...

All In One WP Security plugin 3.8.2 - 2xSQL Injections

The All In One WP Security & Firewall WordPress plugin was affected by a 2xSQL Injections security vulnerability...

WooCommerce <= 2.2.2 - Reflected Cross-Site Scripting (XSS)

The WooCommerce WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WP Content Source Control <= 3.0.0 - Path Traversal

The WP Source Control WordPress plugin was affected by a Path Traversal security vulnerability...

DejaVu 2.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download

The dejavu WordPress theme was affected by a dl-skin.php mysitedownloadskin Parameter Absolute Path Traversal Remote File Download security vulnerability...

Bulteno - Remote File Upload

The bulteno-theme WordPress theme was affected by a Remote File Upload security vulnerability...

Pinboard 1.0.6 - includes/theme-options.php tab Parameter XSS

The Pinboard WordPress theme was affected by an includes/theme-options.php tab Parameter XSS security vulnerability...

JW Player 2.1.2 - wp-admin/admin.php Player Deletion CSRF

The jw-player-plugin-for-wordpress WordPress plugin was affected by a wp-admin/admin.php Player Deletion CSRF security vulnerability...

Yahoo Updates < 1.0 - XSS vulnerabilities in yupdates_application.php

The yahoo-updates-for-wordpress WordPress plugin was affected by a XSS vulnerabilities in yupdatesapplication.php security vulnerability...

Social Sharing Toolkit 2.1.1 - Setting Manipulation CSRF

The Social Sharing Toolkit WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

Booking System <= 1.2 - SQL Injection

The Pinpoint Booking System – 1 WordPress Booking Plugin WordPress plugin was affected by a SQL Injection security vulnerability...

platinum_seo_pack.php - s Parameter Reflected XSS

The Platinum SEO WordPress plugin was affected by a s Parameter Reflected XSS security vulnerability...

WP-DownloadManager 1.60 - Script Insertion CSRF

The wp-download-manager WordPress plugin was affected by a Script Insertion CSRF security vulnerability...

scorerender <= 0.3.4 - XSS in ZeroClipboard

The scorerender WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...

cleeng <= 2.3.2 - XSS in ZeroClipboard

The cleeng WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...

Video Lead Form - "errMsg" Cross-Site Scripting

The Video Lead Form WordPress plugin was affected by a "errMsg" Cross-Site Scripting security vulnerability...

WP Super Cache 1.3 - trunk/plugins/awaitingmoderation.php URI XSS

The WP Super Cache WordPress plugin was affected by a trunk/plugins/awaitingmoderation.php URI XSS security vulnerability...

Mini Mail Dashboard Widget 1.36 - wp-mini-mail.php abspath Parameter Remote File Inclusion

The mini-mail-dashboard-widget WordPress plugin was affected by a wp-mini-mail.php abspath Parameter Remote File Inclusion security vulnerability...

GRAND Flash Album Gallery 0.55 - admin/news.php want2Read Parameter Traversal Arbitrary File Access

The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio WordPress plugin was affected by an admin/news.php want2Read Parameter Traversal Arbitrary File Access security vulnerability...

WP Symposium <= 11.11.26 - Cross-Site Scripting (XSS)

The wp-symposium WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WP Symposium <= 11.11.26 - Remote File Upload Code Execution

The wp-symposium WordPress plugin was affected by a Remote File Upload Code Execution security vulnerability...

Buddypress <= 1.9.1 - Stored Cross-Site Scripting (XSS)

The BuddyPress WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...

VideoWhisper Live Streaming Integration <= 4.25.3 - Cross-Site Scripting (XSS)

The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Simple Paypal Shopping Cart <= 3.5 - Cross-Site Request Forgery (CSRF)

The WordPress Simple PayPal Shopping Cart WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

Wordpress 2.0.5 Trackback UTF-7 Remote SQL Injection Exploit

...

WordPress <= 3.0.5 wp-admin/press-this.php Privilege Escalation

...

Newsletter Manager < 1.0.2 - Authenticated Reflected Cross Site Scripting

The Newsletter Manager WordPress plugin was affected by a Cross Site Scripting security vulnerability...

Contextual Related Posts < 1.8.10.2 - Multiple Parameter SQL Injection

The Contextual Related Posts WordPress plugin was affected by a contextual-related-posts.php Multiple Parameter SQL Injection security vulnerability...

Subscribe To Comments Reloaded 140204 - options/index.php manager_page Parameter Stored XSS Weakness

The Subscribe To Comments Reloaded WordPress plugin was affected by an options/index.php managerpage Parameter Stored XSS Weakness security vulnerability...

Oleggo Livestream <= 0.2.6 - XSS

Plugin is still affected and has been closed...

Prostore < 1.1.3 - Open Redirection

The prostore WordPress theme was affected by an Open Redirection security vulnerability. PoC /wp-content/themes/prostore/go.php?https://example.com...

Ooorl <= 1.0.0 - XSS

Plugin is still affected and has been closed...

FormCraft - form.php id Parameter SQL Injection

The formcraft WordPress plugin was affected by a form.php id Parameter SQL Injection security vulnerability...

Member Private Conversation < 1.4 - Unrestricted File Upload

The Nmedia WordPress Member Conversation WordPress plugin was affected by an Unrestricted File Upload security vulnerability...

WP Recaptcha < 3.0 - Multiple CSRF

The wp-recaptcha WordPress plugin was affected by a Multiple CSRF security vulnerability...

WordPress <= 1.5.1.2 - Email Spoofing

...

WordPress 0.7 - SQL Injection

...

Avada < 7.11.11 - Cross-Site Request Forgery

Description The Avada theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 7.11.10. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged...

CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More < 4.5 - Unauthenticated PHP Object Injection

Description The CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.1 via deserialization of untrusted input from the recentlyviewedproducts cookie. Thi...

WP Time Slots Booking Form < 1.2.11 - Unauthenticated Stored Cross-Site Scripting

Description The WP Time Slots Booking Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

Frontend Checklist <= 2.3.2 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. Go to frontend-checklist admin...

tagDiv Composer < 4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode

Description The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button shortcode in all versions up to, and including, 4.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

DOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC Add the following shortcode ...

Advanced Custom Fields < 6.3 - Contributor+ Custom Field Access

Description The plugin allows you to display custom field values for any post via shortcode without checking for the correct access PoC 1. ADMIN: Install Advanced Custom Fields or ACF Pro 2. ADMIN: Create a new field group for posts and add a field to that 3. ADMIN: Fill in content for posts...

HUSKY – Products Filter Professional for WooCommerce < 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.3.5.3 due to insufficient input sanitization and output escaping on user supplied attributes...

Yumpu ePaper publishing <= 2.0.24 - Missing Authorization to PDF Upload, Publishing, and API Key Modification

Description The Yumpu ePaper publishing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxhandler function in all versions up to, and including, 2.0.24. This makes it possible for authenticated attackers, with subscriber-level...

Testimonial Carousel For Elementor < 10.2.1 - Missing Authorization to Limited Setting Update

Description The Testimonial Carousel For Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'savetestimonialsoptioncallback' function in versions up to, and including, 10.2.0. This makes it possible for unauthenticated...