2024

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not properly sanitise and escape a p

The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated UR

The Hubbub Lite (formerly Grow Social) WordPress plugin before 1.32.0 does not sanitise and escape some of its settings,

The Product Enquiry for WooCommerce WordPress plugin before 3.2 does not sanitise and escape the page parameter before o

The Community by PeepSo WordPress plugin before 6.3.1.2 does not have CSRF check when creating a user post (visible on t

The Voting Record WordPress plugin through 2.0 is missing sanitisation as well as escaping, which could allow any authen

The Voting Record WordPress plugin through 2.0 does not have CSRF check in some places, and is missing sanitisation as w

The WP Customer Area WordPress plugin before 8.2.1 does not properly validates user capabilities in some of its AJAX act

The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX act

The Ultimate Maps by Supsystic WordPress plugin before 1.2.16 does not sanitise and escape some of its settings, which c

The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export fi

The Ecwid Ecommerce Shopping Cart WordPress plugin before 6.12.5 does not have CSRF check in place when updating its set

The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privil

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 does not sanitize and escape some of it

The LearnPress WordPress plugin before 4.2.5.5 does not sanitise and escape user input before outputting it back in the

The Staff / Employee Business Directory for Active Directory WordPress plugin before 1.2.3 does not sanitize and escape

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing  Neighbor Discovery Redire

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option

The T1 WordPress theme through 19.0 is vulnerable to unauthenticated open redirect with which any attacker and redirect

The IURNY by INDIGITALL WordPress plugin before 3.2.3 does not sanitise and escape some of its settings, which could all

The Lana Shortcodes WordPress plugin before 1.2.0 does not validate and escape some of its shortcode attributes before o

The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could al

HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker

The User registration & user profile WordPress plugin through 2.0 does not have CSRF check in some places, and is missin

The hiWeb Migration Simple WordPress plugin through 2.0.0.1 does not sanitise and escape a parameter before outputting i

The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoi

The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which

The Qubely WordPress plugin before 1.8.5 does not validate and escape some of its block options before outputting them b

The UpQode Google Maps WordPress plugin through 1.0.5 does not validate and escape some of its shortcode attributes befo

The Customer Reviews for WooCommerce WordPress plugin before 5.17.0 does not validate and escape some of its shortcode a

The Seed Social WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high

The Font Awesome 4 Menus WordPress plugin through 4.7.0 does not sanitise and escape some of its settings, which could a

The WP Best Quiz WordPress plugin through 1.0 does not sanitize and escape some parameters, which could allow users with

The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may allo

The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting

The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.4 doesn't have authorisation and nonce checks

The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.0 does not escape some of its form fields bef

The Core Control WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which coul

The Coru LFMember WordPress plugin through 1.0.2 does not have CSRF check in place when adding a new game, and is lackin

The WP-Invoice WordPress plugin through 4.3.1 does not have CSRF check in place when updating its settings, and is lacki

The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a s

The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which coul

The Super Forms - Drag & Drop Form Builder WordPress plugin before 6.0.4 does not escape the bob_czy_panstwa_sprawa_zost

The ark-commenteditor WordPress plugin through 2.15.6 does not properly sanitise or encode the comments when in Source e

The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratings_image parameter from its options pag

The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action,

The Simple Post WordPress plugin through 1.1 does not sanitize user input when an authenticated user Text value, then it

The Qyrr WordPress plugin before 0.7 does not escape the data-uri of the QR Code when outputting it in a src attribute,