2023

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check

The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and

The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on th

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check

The Controlled Admin Access plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including,

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up t

The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an unknown parameter in

The uListing plugin for WordPress is vulnerable to authorization bypass due to missing capability checks, and a missing

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Download in versions up

The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on th

The PWA for WP & AMP for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pw

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Post Meta Change in versions up to, and

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated HTML Injection in versions up to, and in

The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to,

The Ultimate GDPR & CCPA plugin for WordPress is vulnerable to unauthenticated settings import and export via the export

The function update_shipment_status_email_status_fun in the plugin Advanced Shipment Tracking for WooCommerce in version

The uListing plugin for WordPress is vulnerable to Unauthenticated Arbitrary Account Changes in versions up to, and incl

The uListing plugin for WordPress is vulnerable to authorization bypass due to missing capability and nonce checks on th

The Frontend File Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1

The Unauthenticated Account Creation plugin for WordPress is vulnerable to Unauthenticated Account Creation in versions

The uListing plugin for WordPress is vulnerable to authorization bypass via Ajax due to missing capability checks, missi

The uListing plugin for WordPress is vulnerable to generic SQL Injection via the ‘listing_id’ parameter in versions up t

The uListing plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the "ulisti

The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the open_r

The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Set

The CMP for WordPress is vulnerable to authorization bypass due to a missing capability check on the cmp_get_post_detail

The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'tw

The Newsletter Manager plugin for WordPress is vulnerable to insecure deserialization in versions up to, and including,

The Ultimate Reviews plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.1.32

The TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro plugins for WordPress are vulnerable to an Options Change vu

The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This i

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions

The Visual Composer plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 26.0 du

The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Acti

The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activ

The GDPR CCPA Compliance Support plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and inclu

The Kali Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1.

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the

The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on se

The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.5. This

The Kali Forms plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and incl

The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the update_layout function in versions up

The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are

The Page Builder: KingComposer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via via shortcode in ve

The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.

The Coming Soon & Maintenance Mode Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up

The Fruitful Theme for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters stored via the frui