2023

The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdm_members', 'wpdm_log

The wordpress vertical image slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search

The WP Directory Kit plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a m

The WooCommerce Multivendor Marketplace – REST API plugin for WordPress is vulnerable to unauthorized access of data and

The wpForo Forum plugin for WordPress is vulnerable to Local File Include, Server-Side Request Forgery, and PHAR Deseria

The WP Replicate Post plugin for WordPress is vulnerable to SQL Injection via the post_id parameter in versions up to, a

The Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress is vulnerable to unauthorized modification of

The WP Responsive Tabs horizontal vertical and accordion Tabs plugin for WordPress is vulnerable to Reflected Cross-Site

The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Maintenance Mode Bypass in versions up to, and

The Essential Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,

The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability

The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability

The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability

The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability

The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to Cross-Site Request Forgery due t

The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to unauthorized access and modifica

The Locatoraid Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcod

The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via t

The PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versio

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to an insuffic

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Server Side Request Forgery via the get_remote_conte

The Directorist plugin for WordPress is vulnerable to an Insecure Direct Object Reference in versions up to, and includi

The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including,

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to unauthorized permalink structure update

The Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress is vulnerable to Cross-Site Request Forgery i

The Ultimate Addons for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in ver

The FluentCRM - Marketing Automation For WordPress plugin for WordPress is vulnerable to unauthorized modification of d

The Weaver Show Posts Plugin for WordPress is vulnerable to stored Cross-Site Scripting due to insufficient escaping of

The Weaver Xtreme Theme for WordPress is vulnerable to stored Cross-Site Scripting due to insufficient escaping of the p

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized cache deletion in versions up to, and including,

The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capabili

The Intuitive Custom Post Order plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.

The Shield Security plugin for WordPress is vulnerable to Missing Authorization on the 'theme-plugin-file' AJAX action i

The Shield Security plugin for WordPress is vulnerable to stored Cross-Site Scripting in versions up to, and including,

The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including

The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including

The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to CSV injection in versions up to, and in

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'fname' attr

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'mf_last_nam

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'mf_first_na

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'mf' shortco

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf' shortcode

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_transaction

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_payment_sta

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_last_name'

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_thankyou' s

The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu

The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on the