Under Construction 1.08 - Setting Manipulation CSRF

The underConstruction WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

Related Posts 2.7.1 - Cross-Site Request Forgery

The related-posts WordPress plugin was affected by a Cross-Site Request Forgery security vulnerability...

Digg Digg 5.3.4 - Setting Manipulation CSRF

The digg-digg WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

q2w3-inc-manager <= 2.3.1 - XSS in ZeroClipboard

The Code Insert Manager Q2W3 Inc Manager WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...

ed2k-link-selector <= 1.1.7 - XSS in ZeroClipboard

The ed2k-link-selector WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...

Zopim Live Chat <= 1.2.5 - XSS in ZeroClipboard

The Zendesk Chat WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...

Video Lead Form - "errMsg" Cross-Site Scripting

The Video Lead Form WordPress plugin was affected by a "errMsg" Cross-Site Scripting security vulnerability...

WP Super Cache 1.3 - trunk/plugins/awaitingmoderation.php URI XSS

The WP Super Cache WordPress plugin was affected by a trunk/plugins/awaitingmoderation.php URI XSS security vulnerability...

WP Super Cache 1.3 - trunk/plugins/badbehaviour.php URI XSS

The WP Super Cache WordPress plugin was affected by a trunk/plugins/badbehaviour.php URI XSS security vulnerability...

W3 Total Cache - Remote Code Execution

The W3 Total Cache WordPress plugin was affected by a Remote Code Execution security vulnerability...

Category Grid View Gallery 2.3.1 - CatGridPost.php ID Parameter XSS

The category-grid-view-gallery WordPress plugin was affected by a CatGridPost.php ID Parameter XSS security vulnerability...

Mini Mail Dashboard Widget 1.36 - wp-mini-mail.php abspath Parameter Remote File Inclusion

The mini-mail-dashboard-widget WordPress plugin was affected by a wp-mini-mail.php abspath Parameter Remote File Inclusion security vulnerability...

Kish Guest Posting 1.2 - Arbitrary File Upload

The kish-guest-posting WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

Simple Paypal Shopping Cart <= 3.5 - Cross-Site Request Forgery (CSRF)

The WordPress Simple PayPal Shopping Cart WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

Featured Comments 1.2.1 - wp-admin/admin-ajax.php Comment Status Manipulation CSRF

The Featured Comments WordPress plugin was affected by a wp-admin/admin-ajax.php Comment Status Manipulation CSRF security vulnerability...

Myflash <= 1.00 - (wppath) RFI

The myflash WordPress plugin was affected by a wppath RFI security vulnerability...

Events Manager 5.5.1 - Multiple Unspecified XSS Vulnerabilities

The Events Manager WordPress plugin was affected by a Multiple Unspecified XSS Vulnerabilities security vulnerability...

Contextual Related Posts < 1.8.10.2 - Multiple Parameter SQL Injection

The Contextual Related Posts WordPress plugin was affected by a contextual-related-posts.php Multiple Parameter SQL Injection security vulnerability...

Sniplets 1.1.2 - (RFI/XSS/RCE) Multiple Vulnerabilities

The Sniplets WordPress plugin was affected by a RFI/XSS/RCE Multiple Vulnerabilities security vulnerability...

Subscribe To Comments Reloaded 140204 - options/index.php manager_page Parameter Stored XSS Weakness

The Subscribe To Comments Reloaded WordPress plugin was affected by an options/index.php managerpage Parameter Stored XSS Weakness security vulnerability...

PictPress <= 0.91 - Remote File Disclosure

The pictpress WordPress plugin was affected by a Remote File Disclosure security vulnerability...

TinyMCE Color Picker 1.1 - tinymce-colorpicker.php Color Saving CSRF

The TinyMCE Color Picker WordPress plugin was affected by a tinymce-colorpicker.php Color Saving CSRF security vulnerability...

Podcast Channels < 0.28 - Unauthenticated Reflected XSS

The Podcast Channels WordPress plugin was affected by an Unauthenticated Reflected XSS security vulnerability. PoC http://127.0.0.1/wp-content/plugins/podcast–channels/getid3/demos/demo.write.php?Filename=Filename%27%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&...

Nextend Facebook Connect <= 1.4.59 - Cross-Site Scripting (XSS)

The Nextend Social Login and Register WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Contact Form 3.34 - contact_form.php cntctfrm_contact_message Parameter XSS

The Contact Form by BestWebSoft WordPress plugin was affected by a contactform.php cntctfrmcontactmessage Parameter XSS security vulnerability...

WordPress 3.5.1 - Multiple Cross-Site Scripting (XSS)

...

Ajax Post Search <= 1.3 - SQL Injection

The cardoza-ajax-search WordPress plugin was affected by a SQL Injection security vulnerability...

WP Recaptcha < 3.0 - Multiple CSRF

The wp-recaptcha WordPress plugin was affected by a Multiple CSRF security vulnerability...

WP Comment Remix < 1.4.4 - SQL Injection

The wp-comment-remix WordPress plugin was affected by a SQL Injection security vulnerability...

WP < 7.0.3 - Subscriber+ Arbitrary Site Creation on Multisite

Description WordPress does not enforce the network registration policy in some cases, which could allow any authenticated user to create new sites on a multisite network where site registration is disabled...

Avada < 7.13.2 - Cross-Site Request Forgery

Description The Avada theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to 7.13.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted...

Avada <= 7.13.2 - Missing Authorization

Description The Avada theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 7.13.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action...

Litho < 3.1 - Unauthenticated Arbitrary File Deletion

Description The Litho theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in all versions up to, and including, 3.0. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code...

Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS

Description Multiple plugins are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups library version 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

12 Step Meeting List < 3.16.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion

Description The 12 Step Meeting List plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpajaxtsmldelete function in all versions up to, and including, 3.16.5. This makes it possible for authenticated attackers, with Contributor-level access a...

LatePoint <= 4.9.91 - Cross-Site Request Forgery

Description The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.9.91. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a...

Photo Gallery by 10Web < 1.8.22 - Multiple Reflected XSS

Description The plugin is vulnerable to Reflected Cross-Site Scripting via the 'imageid', 'currenturl', 'imageurl' and 'thumburl' parameters due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th...

PDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via render

Description The PDF Viewer for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the render function in all versions up to, and including, 2.9.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

Popup Builder < 4.3.2 - Missing Authorization in Multiple AJAX Actions

Description The Popup Builder plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on all AJAX actions. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform multiple unauthorize...

Heateor Social Login WordPress < 1.1.33 - Unauthenticated Stored Cross-Site Scripting

Description The Heateor Social Login WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.1.32 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

Comments – wpDiscuz < 7.6.19 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Comments – wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 7.6.18 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

Sensei LMS <= 4.23.1 & Sensei Pro (WC Paid Courses) <= 4.24.0.1.24.0 - Missing Authorization

Description The Sensei LMS and Sensei Pro WC Paid Courses plugins for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the flushrewriterules function in versions up to, and including, 4.23.1 and . 4.24.0.1.24.0 respectively. This makes it possible...

ElasticPress < 5.1.2 - Data Sync via CSRF

Description The plugin is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on the dosync function. This makes it possible for unauthenticated attackers to sync data via a forged request granted they can trick a site administrator into performing an action such...

WP Time Slots Booking Form < 1.2.11 - Unauthenticated Stored Cross-Site Scripting

Description The WP Time Slots Booking Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

LA-Studio Element Kit for Elementor < 1.3.7.4 - Missing Authorization

Description The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.3.6. This makes it possible for unauthenticated attackers to perform an unauthorized action...

Elementor Addon Elements < 1.13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget

Description The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Twitter Widget in all versions up to, and including, 1.13.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

TablePress – Tables in WordPress made easy < 2.3.2 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind

Description The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3 via the getfilestoimport function. This makes it possible for authenticated attackers, with author-level access and above, to make...

Responsive < 5.0.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Responsive theme for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to 5.0.3.1 exclusive due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level...

Cards for Beaver Builder < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Cards Widget

Description The Cards for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Cards widget in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

Easy Table of Contents < 2.0.66 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed PoC You should create new post with two more heading. Go to the settings of the plugin an...