脆弱性情報

‘WordPress ActiveDEMAND plugin’ (versions <= 0.2.27) Broken Authentication Vulnerability

脆弱性情報

WordPress Rich Reviews by Starfish plugin” (versions <= 1.9.14) Cross Site Request Forgery (CSRF) vulnerability

脆弱性情報

WordPress Enable SVG, WebP & ICO Upload plugin” (versions<= 1.0.1) authenticated stored-address cross-site scripting (XSS) vulnerability

脆弱性情報

WordPress Simple SEO plugin” (versions <= 1.7.91) authenticated stored-address cross-site scripting (XSS) vulnerability

脆弱性情報

WordPress Team plugin” (versions <= 4.1.1) authenticated arbitrary file read and delete vulnerability

脆弱性情報

Authenticated stored-address cross-site scripting (XSS) vulnerability in “WordPress Floating Div plugin” (versions <= 3.0)

脆弱性情報

Vulnerability in “WordPress WPGraphQL WooCommerce plugin” (versions <= 0.11.0) disclosing unauthenticated coupon codes

脆弱性情報

‘WordPress Duplicate Page and Post plugin’ (versions <= 2.7) Authenticated Saved Cross-Site Scripting (XSS) Vulnerability

脆弱性情報

WordPress Team plugin” (versions <= 1.2.6) Multiple AuthenticatedStoredCross-Site Scripting (XSS) vulnerabilities

脆弱性情報

WordPress Team plugin” (versions <= 1.2.6) Multiple AuthenticatedPersistentCross-Site Scripting (XSS) vulnerabilities

脆弱性情報

Vulnerability in “WordPress Homepage Product Organizer for WooCommerce plugin” (versions <= 1.1)

脆弱性情報

WordPress WP-UserOnline plugin” (versions <= 2.87.6) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability

脆弱性情報

WordPress Elementor Contact Form DB” (versions <= 1.7) Reflective Cross Site Scripting (XSS) Vulnerability

脆弱性情報

Vulnerability in “WordPress Testimonials plugin” (versions <= 3.0.1)

脆弱性情報

The “WordPress Easy Student Results plugin” (versions <= 2.2.8) Reflected cross-site scripting (XSS) vulnerability

脆弱性情報

WordPress E Unlocked – Student Result plugin” (versions <= 1.0.4) Arbitrary file upload via Cross Site Request Forgery (CSRF) vulnerability

脆弱性情報

‘WordPress Feed Them Social plugin’ (versions <= 2.9.8.5) unauthenticated PHAR reverse serialization vulnerability

脆弱性情報

Disclosure of sensitive information due to a vulnerability in the “WordPress Easy Student Results plugin” (versions <= 2.2.8) RESTAPI

脆弱性情報

WordPress mTouch Quiz plugin” (versions <= 3.1.3) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability

脆弱性情報

WordPress YaySMTP plugin” (versions <= 2.2) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability

脆弱性情報

WordPress Thinkific Uploader plugin” (versions <= 1.0.0) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability

脆弱性情報

WordPress Website File Changes Monitor plugin” (versions <= 1.8.2) AuthenticatedSQL Injection (SQLi) vulnerability

脆弱性情報

Authentication bypass vulnerability in “WordPress WP OAuth2 Server plugin” (versions <= 1.0.1)

脆弱性情報

‘WordPress YaySMTP – Simple WP SMTP Mail plugin’ (versions <= 2.2.1) authenticated stored cross-site scripting (XSS) vulnerability

脆弱性情報

WordPress WP Comments Fields plugin” (versions <= 4.0) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability

脆弱性情報

WordPress weForms plugin” (versions <= 1.6.13) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability

脆弱性情報

‘WordPress Import CSV Files plugin’ (versions <= 1.0) Reflected cross-site scripting (XSS) vulnerability

脆弱性情報

WordPress WSM Downloader plugin” (versions <= 1.4.0) domain name restriction bypass vulnerability

脆弱性情報

WordPress User Private Files plugin” (versions <= 1.1.2) Authenticated arbitrary file upload vulnerability

脆弱性情報

WordPress Discy premium theme” (versions <= 4.9) Vulnerability Description

脆弱性情報

‘WordPress YaySMTP – Simple WP SMTP Mail plugin’ (versions <= 2.2.1) authenticated stored cross-site scripting (XSS) vulnerability

脆弱性情報

WordPress WP Comments Fields plugin” (versions <= 4.0) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability

脆弱性情報

Vulnerability in “WordPress WSM Downloader plugin” (versions <= 1.4.0)

脆弱性情報

Vulnerability in “WordPress GiveWP plugin” (versions <= 2.20.2) authenticated arbitrary files via export function

脆弱性情報

Creation of authenticated arbitrary files due to a vulnerability in the “WordPress GiveWP plugin” (versions <= 2.20.2) export function

脆弱性情報

DoS via “WordPress GiveWP plugin” (versions <= 2.21.2) Cross Site Request Forgery (CSRF) vulnerability

脆弱性情報

WordPress GiveWP plugin” (versions <= 2.21.2) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability

脆弱性情報

WordPress Featured Image from URL plugin” (versions <= 4.0.0) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability

脆弱性情報

WordPress Featured Image from URL plugin” (versions <= 3.9.9) arbitrary configuration update to XSS via CSRF vulnerability

脆弱性情報

WordPress Youzify plugin” (versions <= 1.1.9) unauthenticated SQL injection (SQLi) vulnerability

脆弱性情報

Local File Include (LFI) via “WordPress CAPTCHA 4WP plugin” (versions <= 7.0.6.1) Cross Site Request Forgery (CSRF) vulnerability

脆弱性情報

WordPress YaySMTP plugin” (versions <= 2.2) authenticated SMTP credentials compromise vulnerability

脆弱性情報

Vulnerability in “WordPress YaySMTP plugin” (versions <= 2.2) authenticated log disclosure

脆弱性情報

WordPress YOP Poll plugin” (versions <= 6.4.2) IP spoofing vulnerability

脆弱性情報

WordPress Project Source Code Download plugin” (versions <= 1.0.0) unauthenticated backup download vulnerability

脆弱性情報

WordPress Event Timeline plugin” (versions <= 1.1.5) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability

脆弱性情報

WordPress Invitation Based Registrations plugin” (versions <= 2.2.84) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability

脆弱性情報

WordPress Simple Membership plugin” (versions <= 4.1.2) membership privilege escalation vulnerability

脆弱性情報

WordPress Simple Membership plugin” (versions <= 4.1.2) unauthenticated membership privilege escalation vulnerability

脆弱性情報

WordPress Progressive License plugin” (versions <= 1.1.0) Cross-site request forgery (CSRF) vulnerability leading to cross-site scripting (XSS)