Lana Codes

Plugin

CP Blocks <= 1.0.20 CSRF Leading to Plugin Settings Change Vulnerability

Plugin

WooCommerce Conversion Tracking <= 2.0.10 CrossSite Request Forgery (CSRF) vulnerability

Plugin

weMail <= 1.14.1 Cross Site Request Forgery (CSRF)

Plugin

Legal Pages <= 1.3.8 Cross Site Request Forgery (CSRF)

Plugin

Directorist <= 7.7.1 Broken Access Control

Plugin

Texty – SMS Notification for WordPress, WooCommerce, Dokan and more <= 1.1.1 CrossSite Request Forgery (CSRF)

Plugin

Exclusive Team for Elementor <= 1.2.4 CrossSite Request Forgery (CSRF) vulnerability

Plugin

WordPress CTA <= 1.5.6 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Product Category Showcase for WooCommerce <= 1.1.9 CrossSite Request Forgery (CSRF) vulnerability

Plugin

weDocs – Knowledgebase and Documentation Plugin for WordPress <= 1.7.5 Cross Site Request Forgery (CSRF)

Plugin

WP Project Manager <= 2.6.0 Cross Site Request Forgery (CSRF) vulnerability

Plugin

GS Logo Slider <= 3.4.2 Cross Site Request Forgery (CSRF)

Plugin

Unlimited Elementor Inner Sections By BoomDevs < 1.0.0 CrossSite Request Forgery vulnerability

Plugin

Font Awesome 4 Menus <= 4.7.0 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

Slimstat Analytics <= 5.0.9 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

AffiliateWP 2.14.0 Missing Authorization to Auth. Arbitrary Plugin Activation

Plugin

Email Encoder Bundle <= 2.1.7 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

Charitable <= 1.7.0.12

Plugin

Printful Integration for WooCommerce <= 2.2.3 Cross Site Request Forgery (CSRF)

Plugin

Futurio Extra <= 1.8.4 Cross Site Request Forgery (CSRF)

Plugin

WP HTML Mail <= 3.4.1 Cross Site Request Forgery (CSRF)

Plugin

MailChimp Forms by MailMunch <= 3.1.4 Broken Access Control

Plugin

WP Project Manager <= 2.6.4 Arbitrary Usermeta Update to Authenticated Privilege Escalation

Plugin

The Post Grid <= 7.2.7 Cross Site Request Forgery (CSRF) Leading To CSS Change Vulnerability

Plugin

WP Ultimate CSV Importer <= 7.9.8 Authenticated Arbitrary Usermeta Update to Privilege Escalation vulnerability

Plugin

WP Ultimate CSV Importer <= 7.9.8 Sensitive Information Exposure via Directory Listing vulnerability

Plugin

WP Ultimate CSV Importer <= 7.9.8 Authenticated PHP file upload to RCE vulnerability

Plugin

WP Ultimate CSV Importer <= 7.9.8 Authenticated Remote Code Execution vulnerability

Plugin

JupiterX Core <= 2.5.0 Unauth. Arbitrary File Download vulnerability

Plugin

Social Share Icons & Social Share Buttons <= 3.5.7 Broken Access Control

Plugin

Advanced AJAX Product Filters <= 1.6.3.3 Broken Access Control + CSRF

Plugin

Exit Popups & Onsite Retargeting by OptiMonk <= 2.0.4 Cross Site Request Forgery (CSRF)

Plugin

Classified Listing <= 2.4.5 Cross Site Request Forgery (CSRF) Leading To Thumbnail Removal Vulnerability

Plugin

Media Library Helper by Codexin <= 1.2.0 Cross Site Request Forgery (CSRF)

Plugin

ND Shortcodes For Visual Composer < 7.0 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

User Registration <= 3.0.2 Authenticated Arbitrary File Upload vulnerability

Plugin

Web3 – Crypto wallet Login & NFT token gating <= 2.6.0 Authentication Bypass vulnerability

Plugin

SP Project & Document Manager <= 4.67 Auth. Insecure Direct Object Reference vulnerability

Plugin

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 Authentication Bypass Vulnerability

Plugin

Salon booking system <= 8.4.7 CrossSite Request Forgery (CSRF) vulnerability

Plugin

LearnDash LMS <= 4.6.0

Plugin

Contact Form & Lead Form Elementor Builder <= 1.8.4 Broken Access Control vulnerability

Plugin

Th Product Compare <= 1.2.5 Broken Access Control vulnerability

Plugin

EmbedPress <= 3.7.3 Sensitive Information Exposure vulnerability

Plugin

Lana Text to Image <= 1.0.0 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

BookIt <= 2.3.7 Authentication Bypass Vulnerability

Plugin

myCred <= 2.5 Cross Site Request Forgery (CSRF)

Plugin

Abandoned Cart Lite for WooCommerce <= 5.14.2 Authentication Bypass Vulnerability

Plugin

Page Builder with Image Map by AZEXO <= 1.27.133 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Page Builder with Image Map by AZEXO <= 1.27.133 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

Page Builder with Image Map by AZEXO <= 1.27.133 Missing Authorization to Post Creation vulnerability

Plugin

Page Builder with Image Map by AZEXO <= 1.27.133 CrossSite Request Forgery to Stored CrossSite Scripting (XSS) vulnerability

Plugin

WP User Switch <= 1.0.2 Authentication Bypass via Cookie vulnerability

Plugin

WP Hide Post <= 2.0.10 Cross Site Request Forgery (CSRF) Leading To Post Status Change Vulnerability

Plugin

Cart2Cart: Magento to WooCommerce Migration <= 2.0.0 Broken Access Control

Plugin

Change WooCommerce Add To Cart Button Text <= 1.3 Broken Access Control

Plugin

Kebo Twitter Feed <= 1.5.12 Cross Site Request Forgery (CSRF)

Plugin

WPC Smart Wishlist for WooCommerce <= 4.7.1 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Constant Contact Forms <= 2.0.3 Broken Access Control vulnerability

Plugin

Social Media & Share Icons <= 2.8.1 Broken Access Control + CSRF

Plugin

Drop Shadow Boxes <= 1.7.10 Cross Site Scripting (XSS) vulnerability

Plugin

Download Theme <= 1.0.9 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Download Plugin <= 2.0.4 CrossSite Request Forgery (CSRF) vulnerability

Plugin

OAuth Single Sign On – SSO (OAuth Client) <= 6.23.3 Broken Authentication vulnerability

Plugin

Waiting: One-click countdowns <= 0.6.2 click countdowns plugin <= 0.6.2 Authenticated (Subscriber+) Stored CrossSite Scripting vulnerability

Plugin

OTP Login Woocommerce & Gravity Forms <= 2.2 Authentication Bypass to Privilege Escalation vulnerability

Plugin

BuddyForms <= 2.8.1 Cross Site Scripting (XSS) vulnerability

Plugin

WP Reactions Lite <= 1.3.8 Cross Site Request Forgery (CSRF)

Plugin

WP-Chatbot for Messenger <= 4.7 Chatbot for Messenger plugin <= 4.7 Broken Access Control

Plugin

Soundcloud Is Gold <= 2.5.1 Broken Access Control

Plugin

Forget About Shortcode Buttons <= 2.1.2 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Portfolio Gallery – Responsive Image Gallery <= 1.4.6 Broken Access Control vulnerability

Plugin

WP Category Post List Widget <= 2.0.3 Cross Site Scripting (XSS) vulnerability

Plugin

Add Posts to Pages <= 1.4.1 Cross Site Scripting (XSS) vulnerability

Plugin

Owl Carousel <= 0.5.3 Cross Site Scripting (XSS) vulnerability

Plugin

Pinterest RSS Widget <= 2.3.1 Cross Site Scripting (XSS) vulnerability

Plugin

Brands for WooCommerce <= 3.7.0.6 Cross Site Scripting (XSS) vulnerability

Plugin

Easy Appointments <= 3.11.9 CrossSite Request Forgery (CSRF) vulnerability

Plugin

WP Job Portal <= 2.0.1 Unauthorized Plugin Settings Change vulnerability

Plugin

Active Directory Integration / LDAP Integration < 4.1.1 Unauthenticated Data Disclosure vulnerability

Plugin

Profile Builder <= 3.9.0 Insecure Password Reset Mechanism vulnerability

Plugin

f(x) TOC <= 1.1.0 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

ActiveCampaign < 8.1.12 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

Product Slider For WooCommerce Lite <= 1.1.7 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

Wp D3 <= 2.4.1 D3 plugin <= 2.4.1 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

Custom Post Type List Shortcode <= 1.4.4 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

Post Shortcode <= 2.0.9 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

Enable/Disable Auto Login when Register <= 1.1.0 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Ultimate Carousel For WPBakery Page Builder <= 2.6 Contributor+ Stored XSS vulnerability

Plugin

Mega Addons For WPBakery Page Builder <= 4.2.7 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

Ultimate Carousel For Elementor <= 2.1.7 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

Avirato hotels online booking engine <= 5.0.5 Auth. SQL Injection (SQLi) vulnerability

Plugin

Weaver Xtreme Theme Support <= 6.2.5 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

Rating Widget <= 3.2.0 Widget: Star Review System plugin <= 3.2.0 Cross Site Scripting (XSS) vulnerability

Plugin

Arconix Shortcodes <= 2.1.7 Cross Site Scripting (XSS) vulnerability

Plugin

WPJAM Basic <= 6.2.1 Cross Site Scripting (XSS) vulnerability

Plugin

Premmerce <= 1.3.18 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Mail Subscribe List <= 2.1.9 Cross Site Scripting (XSS) vulnerability

Plugin

Uji Popup <= 1.4.3 Cross Site Scripting (XSS) vulnerability

Plugin

File Gallery <= 1.8.5.3 Cross Site Scripting (XSS) vulnerability

Plugin

Social Share Boost <= 4.4 Cross Site Scripting (XSS) vulnerability

Plugin

WP Links Page <= 4.9.3 Cross Site Scripting (XSS) vulnerability

Plugin

FormCraft <= 1.2.7 Cross Site Scripting (XSS) vulnerability

Plugin

WP Docs <= 1.9.8 Broken Access Control

Plugin

WP Login Box <= 2.0.2 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

GDPR Compliance & Cookie Consent <= 1.2 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Motors – Car Dealer & Classified Ads <= 1.4.4 Multiple CrossSite Request Forgery (CSRF) vulnerabilities

Plugin

Pearl <= 1.3.4 CrossSite Request Forgery (CSRF) vulnerability

Plugin

BadgeOS <= 3.7.1.6 Multiple CrossSite Request Forgery (CSRF) vulnerability

Plugin

Button Builder – Buttons X <= 0.8.6 Cross Site Scripting (XSS) vulnerability

Plugin

BBSpoiler <= 2.01 Cross Site Scripting (XSS) vulnerability

Plugin

Smart WooCommerce Search <= 2.5.0 Broken Access Control

Plugin

Zendesk Support for WordPress <= 1.8.4 Cross Site Request Forgery (CSRF)

Plugin

Easy Appointments <= 3.10.7 Auth. Stored CrossSite Scripting (XSS) vulnerability

Plugin

Shortcodes <= 3.46 Broken Access Control vulnerability

Plugin

CoSchedule <= 3.3.8 Cross Site Request Forgery (CSRF)

Plugin

Easy Sign Up <= 3.4.1 Cross Site Scripting (XSS) vulnerability

Plugin

IMPress Listings <= 2.6.2 Cross Site Scripting (XSS) vulnerability

Plugin

qTranslate X Cleanup and WPML Import <= 3.0.1 Broken Access Control vulnerability

Plugin

Really Simple Google Tag Manager <= 1.0.6 Cross Site Request Forgery (CSRF) vulnerability

Plugin

WishSuite <= 1.3.3 Cross Site Request Forgery (CSRF) vulnerability

Plugin

HT Menu <= 1.2.1 Cross Site Request Forgery (CSRF) vulnerability

Plugin

JustTables – WooCommerce Product Table <= 1.4.9 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Swatchly – WooCommerce Variation Swatches for Products <= 1.2.0 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Advanced Shipment Tracking for WooCommerce <= 3.5.2 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Advanced Local Pickup for WooCommerce <= 1.5.2 Broken Access Control

Plugin

TH Variation Swatches <= 1.2.7 CrossSite Request Forgery (CSRF) vulnerability

Plugin

TH Side Cart and Menu Cart for Woocommerce <= 1.1.1 Broken Access Control

Plugin

Advance WordPress Search Plugin <= 1.1.4 Broken Access Control

Plugin

eRoom – Zoom Meetings & Webinar <= 1.4.6 Broken Access Control vulnerability

Plugin

Wbcom Designs – BuddyPress Activity Social Share <= 3.5.0 Cross Site Request Forgery (CSRF)

Plugin

WP Content Pilot – Autoblogging & Affiliate Marketing Plugin <= 1.3.3 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.3 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Worth The Read <= 1.14 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Fuse Social Floating Sidebar <= 5.4.6 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Download Increase Maximum Upload File Size | Increase Execution Time <= 1.0.9 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Visibility Logic for Elementor <= 2.3.3 CrossSite Request Forgery (CSRF) vulnerability

Plugin

GS Pins for Pinterest <= 1.6.2 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Onepage Builder – Easiest Landing Page Builder For WordPress <= 2.4.1 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Update Image Tag Alt Attribute <= 2.4.5 CrossSite Request Forgery (CSRF) vulnerability

Plugin

BuddyPress Builder for Elementor – BuddyBuilder <= 1.7.1 CrossSite Request Forgery (CSRF) vulnerability

Plugin

PT Addons for Elementor Lite <= 2.2 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Product Category Slider for WooCommerce <= 4.1.5 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Elementor Addons, Widgets and Enhancements – Stax <= 1.4.3 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Post Grid, Slider & Carousel Ultimate <= 1.6.3 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Bangladeshi Payment Gateways <= 2.0.6 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Challan – PDF Invoice & Packing Slip for WooCommerce <= 3.4.8 CrossSite Request Forgery (CSRF) vulnerability

Plugin

WP Mail Logging <= 1.10.5 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Exclusive Addons Elementor <= 2.6.1 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Subscribe2 <= 10.37 CrossSite Request Forgery (CSRF) vulnerability

Plugin

WP Dark Mode <= 3.0.4 CrossSite Request Forgery (CSRF) vulnerability

Plugin

WP User Frontend <= 3.6.0 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Product Gallery Slider for WooCommerce <= 2.2.6 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Dashboard Welcome for Elementor <= 1.0.6 CrossSite Request Forgery (CSRF) vulnerability

Plugin

WP VR <= 8.2.5 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Woostify Sites Library <= 1.4.3 CrossSite Request Forgery (CSRF) vulnerability

Plugin

W4 Post List <= 2.4.2 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Boostify Header Footer Builder for Elementor <= 1.2.8 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Click to top <= 1.2.19 CrossSite Request Forgery (CSRF) vulnerability

Plugin

wePOS – Point Of Sale (POS) for WooCommerce <= 1.2.5 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Gallery Box <= 1.7.30 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Magical Posts Display – Elementor & Gutenberg Posts Blocks <= 1.2.15 CrossSite Request Forgery (CSRF) vulnerability

Plugin

GS Testimonial Slider <= 1.9.7 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Webinar and Video Conference with Jitsi Meet <= 1.2.5 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Stylish Cost Calculator <= 7.3.6 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Dark Mode <= 4.1.2 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Wp Edit Password Protected – Create Member/User Only Page & Design Password Protected Form <= 1.2.3 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Cart Lift <= 3.1.3 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Sheets To WP Table Live Sync <= 2.12.14 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Happy Addons for Elementor <= 3.7.2 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Wiremo – Product Reviews for WooCommerce <= 1.4.96 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Responsive Slider by MetaSlider <= 3.28.0 Cross Site Request Forgery (CSRF)

Plugin

ConvertBox Auto Embed WordPress plugin <= 1.0.19 Cross Site Scripting (XSS) vulnerability

Plugin

Ecwid Shopping Cart <= 6.11.4 Cross Site Scripting (XSS) vulnerability

Plugin

Contact Form 7 – PayPal & Stripe Add-on <= 1.9.3 on plugin <= 1.9.3 Cross Site Request Forgery (CSRF) vulnerability

Plugin

WP Shortcode by MyThemeShop <= 1.4.16 CrossSite Request Forgery (CSRF) vulnerability

Plugin

ProfileGrid 5.0.3 Broken Access Control vulnerability

Plugin

Contact Form Email <= 1.3.31 Missing Authorization Leading To Feedback Submission Vulnerability

Plugin

CP Multi View Event Calendar <= 1.4.10 Missing Authorization Leading To Feedback Submission vulnerability

Plugin

Event Manager for WooCommerce <= 3.7.7 Cross Site Request Forgery (CSRF)

Plugin

HT Feed <= 1.2.7 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Min and Max Quantity for WooCommerce <= 1.3.2.6 Broken Access Control

Plugin

Advanced Product Labels for WooCommerce <= 1.2.4 Broken Access Control

Plugin

Load More Products for WooCommerce <= 1.1.9.7 Broken Access Control

Plugin

Brands for WooCommerce <= 3.7.0.5 Broken Access Control

Plugin

Grid List View for WooCommerce <= 1.1.3.6 Broken Access Control

Plugin

Cart Notices for WooCommerce <= 3.5.7.6 Broken Access Control

Plugin

Terms and Conditions Popup for WooCommerce <= 3.5.7.6 Broken Access Control

Plugin

Product Tabs Manager for WooCommerce <= 1.1.5.7 Broken Access Control

Plugin

Product Watermark for WooCommerce <= 1.3.5.6 Broken Access Control

Plugin

Sequential Order Numbers for WooCommerce <= 3.5.7.6 Broken Access Control

Plugin

Pagination Styler for WooCommerce <= 3.5.7.6 Broken Access Control

Plugin

Sales Report for WooCommerce <= 3.5.7.6 Broken Access Control

Plugin

Products Compare for WooCommerce <= 3.5.7.7 Broken Access Control

Plugin

Products Suggestions for WooCommerce <= 3.5.7.6 Broken Access Control

Plugin

Dynamics 365 Integration <= 1.3.12 Broken Access Control

Plugin

Contact Form 7 Redirect & Thank You Page <= 1.0.3 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Backup Bank: WordPress Backup Plugin <= 4.0.28 Broken Access Control vulnerability

Plugin

Popup Maker <= 1.17.1 Broken Access Control vulnerability

Plugin

HT Easy GA4 ( Google Analytics 4 ) <= 1.0.6 Cross Site Request Forgery (CSRF) vulnerability

Plugin

YITH WooCommerce Product Slider Carousel <= 1.16.0 CrossSite Request Forgery (CSRF)

Plugin

Sales Report Email for WooCommerce <= 2.8 Auth. Test Email Submission vulnerability

Plugin

Rife Elementor Extensions & Templates <= 1.1.10 Broken Access Control

Plugin

CP Contact Form with Paypal <= 1.3.34 Missing Authorization Leading To Feedback Submission vulnerability

Plugin

Calculated Fields Form <= 1.1.120 Missing Authorization Leading To Feedback Submission Vulnerability

Plugin

Search in Place <= 1.0.104 Missing Authorization Leading To Feedback Submission vulnerability

Plugin

WP Time Slots Booking Form <= 1.1.76 Missing Authorization Leading To Feedback Submission vulnerability

Plugin

Drag and Drop Multiple File Upload for WooCommerce <= 1.0.8 Unauth. Nonarbitrary file upload/deletion

Plugin

Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.6.5 Multiple CSRF vulnerabilities

Plugin

Apollo13 Framework Extensions <= 1.8.10 Broken Access Control

Plugin

Social Login WP <= 5.0.0.0 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Community by PeepSo <= 6.0.2.0 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Video Gallery – YouTube Gallery <= 1.7.6 Broken Access Control vulnerability

Plugin

Gutenberg Blocks by WordPress Download Manager <= 2.1.8 Cross Site Scripting (XSS) vulnerability

Plugin

Uncanny Toolkit for LearnDash <= 3.6.4.1 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Simple PDF Viewer <= 1.9 Cross Site Scripting (XSS) vulnerability

Plugin

Google Maps v3 Shortcode <= 1.2.1 Cross Site Scripting (XSS) vulnerability

Plugin

Portfolio Slideshow <= 1.13.0 Cross Site Scripting (XSS) vulnerability

Plugin

Advanced Dynamic Pricing for WooCommerce <= 4.1.5 Broken Access Control

Plugin

Fontiran <= 2.1 Broken Access Control

Plugin

vSlider Multi Image Slider for WordPress <= 4.1.2 Cross Site Scripting (XSS)

Plugin

Ultimate WP Query Search Filter <= 1.0.10 Cross Site Scripting (XSS) vulnerability

Plugin

NextGEN Gallery <= 3.28 CrossSite Request Forgery (CSRF)

Plugin

Tickera <= 3.5.1.0 CSRF Leading To Post Status Change Vulnerability

Plugin

Profile Builder <= 3.9.0 Sensitive Information Disclosure via Shortcode vulnerability

Plugin

Fancy Comments WordPress <= 1.2.10 Cross Site Scripting (XSS) vulnerability

Plugin

Portfolio – WordPress Portfolio Plugin <= 2.8.10 Cross Site Scripting (XSS) vulnerability

Plugin

Booking Calendar Contact Form <= 1.2.34 Broken Access Control

Plugin

Google Maps CP <= 1.0.43 Missing Authorization Leading To Feedback Submission Vulnerability

Plugin

Ajax Search Lite <= 4.10.3 Auth. Data Exposure vulnerability

Plugin

PayPal Brasil para WooCommerce <= 1.4.2 Broken Access Control

Plugin

Formidable Forms <= 5.5.4 Broken Access Control vulnerability

Plugin

WP Tabs <= 2.1.14 Cross Site Request Forgery (CSRF)

Plugin

Multi-column Tag Map <= 17.0.24 column Tag Map plugin <= 17.0.24 Cross Site Scripting (XSS) vulnerability

Plugin

We’re Open! <= 1.45 Broken Access Control

Plugin

Robo Gallery <= 3.2.9 CrossSite Request Forgery (CSRF) vulnerability

Plugin

Wufoo Shortcode < 1.52 Contributor+ Stored XSS via Shortcode vulnerability

Plugin

GS Books Showcase < 1.3.1 Contributor+ Stored XSS Vulnerability

Plugin

GS Filterable Portfolio < 1.6.1 Contributor+ Stored XSS Vulnerability

Plugin

GS Portfolio for Envato < 1.4.0 Contributor+ Stored XSS Vulnerability

Plugin

GS Products Slider for WooCommerce < 1.5.9 Contributor+ Stored XSS Vulnerability