List Attachments Shortcode <= 0.4.1a - Authenticated (Author+) Stored Cross-Site Scripting via list-attachments Shortcode

cgrymala List Attachments Shortcode

Listar – Directory Listing & Classifieds WordPress Plugin <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Listing Update

passionui Listar – Directory Listing & Classifieds WordPress Plugin

Canadian Nutrition Facts Label <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Nutrition Label Custom Post Type

emaude Canadian Nutrition Facts Label

Cute News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute

arnabkumar Cute News Ticker

TR Timthumb <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

pntrinh TR Timthumb

Application Passwords <= 0.1.3 - Reflected Cross-Site Scripting via reject_url

georgestephanis Application Passwords

Helloprint <= 2.1.2 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification

helloprint Plug your WooCommerce into the largest catalog of customized print products from Helloprint

WP Landing Page <= 0.9.3 - Cross-Site Request Forgery to Arbitrary Post Meta Update

xbenx WP Landing Page

Flex QR Code Generator <= 1.2.6 - Unauthenticated Arbitrary File Upload

ajitdas Flex QR Code Generator

g-FFL Cockpit <= 1.7.1 - Improper Authorization to Unauthenticated Product Deletion

garidium g-FFL Cockpit

Listar – Directory Listing & Classifieds WordPress Plugin <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

passionui Listar – Directory Listing & Classifieds WordPress Plugin

g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposure

garidium g-FFL Cockpit

Social Feed Gallery Portfolio <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute

wpdiscover Social Feed Gallery Portfolio

Ultra Skype Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btn_id' Shortcode Attribute

sozan45 Ultra Skype Button

Live Sales Notification for Woocommerce – Woomotiv <= 3.6.3 - Reflected Cross-Site Scripting

delabon Live Sales Notification for Woocommerce – Woomotiv

myLCO <= 0.8.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']

realloc myLCO

fit2cloud Halo cross-site request forgery

fit2cloud Halo fit2cloud halo

Google Apigee-X 安全漏洞

Google Cloud Apigee-X

Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clause

stevejburge Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI

weDocs <= 2.1.14 - Missing Authorization to Settings Update

wedevs weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot