TR Timthumb <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

pntrinh TR Timthumb

Application Passwords <= 0.1.3 - Reflected Cross-Site Scripting via reject_url

georgestephanis Application Passwords

Helloprint <= 2.1.2 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification

helloprint Plug your WooCommerce into the largest catalog of customized print products from Helloprint

WP Landing Page <= 0.9.3 - Cross-Site Request Forgery to Arbitrary Post Meta Update

xbenx WP Landing Page

Flex QR Code Generator <= 1.2.6 - Unauthenticated Arbitrary File Upload

ajitdas Flex QR Code Generator

g-FFL Cockpit <= 1.7.1 - Improper Authorization to Unauthenticated Product Deletion

garidium g-FFL Cockpit

Listar – Directory Listing & Classifieds WordPress Plugin <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

passionui Listar – Directory Listing & Classifieds WordPress Plugin

g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposure

garidium g-FFL Cockpit

Social Feed Gallery Portfolio <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute

wpdiscover Social Feed Gallery Portfolio

Ultra Skype Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btn_id' Shortcode Attribute

sozan45 Ultra Skype Button

Live Sales Notification for Woocommerce – Woomotiv <= 3.6.3 - Reflected Cross-Site Scripting

delabon Live Sales Notification for Woocommerce – Woomotiv

myLCO <= 0.8.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']

realloc myLCO

fit2cloud Halo cross-site request forgery

fit2cloud Halo fit2cloud halo

Google Apigee-X 安全漏洞

Google Cloud Apigee-X

Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clause

stevejburge Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI

weDocs <= 2.1.14 - Missing Authorization to Settings Update

wedevs weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot

Link Whisper Free <= 0.8.8 - Reflected Cross-Site Scripting

linkwhspr Link Whisper Free

Widgets for Google Reviews <= 13.2.4 - Unauthenticated Stored Cross-Site Scripting via Google Reviews

trustindex Widgets for Google Reviews

HedgeDoc is missing state parameter in OAuth2 flows could lead to CSRF

hedgedoc hedgedoc hedgedoc hedgedoc

xerrors Yuxi-Know embed.py OtherEmbedding.aencode server-side request forgery

xerrors Yuxi-Know xerrors Yuxi-Know +2个