2024

The Video Grid plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in ver

A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs. [Rancher Au

The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple paramet

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing c

The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to authorization bypass due to a missin

The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and includi

The Product Vendors is vulnerable to Reflected Cross-Site Scripting via the 'vendor_description' parameter in versions u

The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulne

The Accordion Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘html’ attribute of an ac

The File Manager Pro plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and inc

The File Manager Pro plugin for WordPress is vulnerable to arbitrary backup file downloads and uploads due to missing fi

The File Manager Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due t

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data du

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due t

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized subscription cancellati

The plugin ACF Quick Edit Fields for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request For

WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploite

The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on sev

The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter cal

The NinjaFirewall plugin for WordPress is vulnerable to Authenticated PHAR Deserialization in versions up to, and includ

The Post Grid plugin for WordPress is vulnerable to blind SQL Injection via post metadata in versions up to, and includi

The ZoomSounds plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the '

The Kaswara Modern VC Addons plugin for WordPress is vulnerable to authorization bypass in versions up to, and including

The Essential Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to and inc

The Essential Addons for Elementor plugin for WordPress is vulnerable to authorization bypass in versions up to and incl

The Premium Addons for Elementor plugin for WordPress is vulnerable to Arbitrary Option Updates in versions up to, and i

The Product Filter by WooBeWoo plugin for WordPress is vulnerable to authorization bypass in versions up to, and includi

The WordPress Mega Menu plugin for WordPress is vulnerable to Arbitrary File Creation in versions up to, and including,

The WP Lead Plus X plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.

The Facebook Chat Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp

The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability che

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and i

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to sensitive information disclosure of a Wor

The Discount Rules for WooCommerce plugin for WordPress is vulnerable to missing authorization via several AJAX actions

The Indeed Membership Pro plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on

The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and includi

The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to authorization bypass due to missing c

The SiteGround Optimizer plugin for WordPress is vulnerable to authorization bypass leading to Remote Code Execution and

The Rich Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the POST body 'update' parameter i

The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in near

The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to,

The File Manager plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the /i

The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters su