Filter
-Infinity
0
Trending
Versions
2.0
70
2.0.1
65
2.0.2
61
2.0.4
61
1.5
60
2.0.5
60
1.0
57
1.2
57
2.1.1
57
2.2
57
1.5.1
56
2.0.6
56
2.1.2
56
2.2.1
55
1.5.1.2
54
2.0.7
54
2.1
53
1.5.1.3
52
1.2.2
51
2.1.3
51
2.0.11
50
2.2.2
50
2.3
50
1.2.1
49
2.0.10
49
1.0.1
47
1.0.2
47
1.5.2
47
2.0.9
47
2.2.3
47
2.5
46
0.71
45
2.3.1
45
2.3.2
45
2.6
45
2.0.8
43
2.5.1
43
2.6.1
41
2.6.3
41
2.3.3
40
2.6.2
39
2.7
39
2.7.1
39
2.6.5
38
2.8
37
2.8.1
37
2.8.2
37
2.8.5
37
2.9
37
3.1
37
BleepingComputerMalware campaign 'DollyWay' breached 20,000 WordPress sites
First published (updated )
News
BleepingComputerWordPresspixelstats <= 0.8.2 - Reflected Cross-Site Scripting
6.1
First published (updated )
Directory Listings uListingDirectory Listings WordPress plugin – uListing <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection
8.8
First published (updated )
ZipList RecipeWordPress ZipList Recipe plugin <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability
8.8
EPSS
0.02%
First published (updated )
WordPressWordPress wordpress login form to anywhere plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability
5.9
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Golo City Travel GuideGolo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change
9.8
First published (updated )
InWave JobsInWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset
9.8
First published (updated )
WordPressWordPress WP Journal plugin <= 1.1 - Broken Access Control vulnerability
6.5
First published (updated )
WP FixTagWordPress WP FixTag plugin <= v2.0.2 - Cross Site Scripting (XSS) vulnerability
7.1
First published (updated )
WordPressWordPress rng-refresh plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPressWordPress WP FPO plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
7.1
First published (updated )
VW Themes IbtanaWordPress Ibtana – WordPress Website Builder plugin <= 1.2.4.9 - Stored Cross Site Scripting (XSS) vulnerability
6.5
EPSS
0.03%
First published (updated )
NextGEN GalleryNextGEN Gallery < 3.59.9 - Admin+ Stored XSS
3.5
First published (updated )
FULL SERVICES FULL CustomerWordPress FULL – Cliente plugin <= 3.1.26 - Local File Inclusion vulnerability
7.5
EPSS
0.11%
First published (updated )
ZiggeoZiggeo <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The Events CalendarEvents Calendar Made Simple – Pie Calendar <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piecal Shortcode
6.4
First published (updated )
Categorized Gallery PluginCategorized Gallery Plugin <= 2.0 - Authenticated (Contributor+) SQL Injection
6.5
First published (updated )
UMich OIDC LoginUMich OIDC Login <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
First published (updated )
WordPressCoaching Staffs <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
First published (updated )
PressMart Modern Elementor WooCommerce WordPress ThemePressMart - Modern Elementor WooCommerce WordPress Theme <= 1.2.16 - Unauthenticated Arbitrary Shortcode Execution
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPressWordPress Admin Options Pages plugin <= 0.9.7 - Reflected Cross Site Scripting (XSS) vulnerability
7.1
EPSS
0.04%
First published (updated )
Ariagle WP-ClapWordPress WP-Clap plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability
7.1
EPSS
0.04%
First published (updated )
wjharil AdsMiddleWordPress AdsMiddle plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
7.1
EPSS
0.04%
First published (updated )
AForms EatsAForms Eats <= 1.3.1 - Unauthenticated Full Path Disclosure
5.3
First published (updated )
WordPressWordPress Link to URL / Post plugin <=1.3 - SQL Injection vulnerability
7.6
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPressWordPress WP Admin Custom Page plugin <= 1.5.0 - CSRF to Stored XSS vulnerability
7.1
EPSS
0.04%
First published (updated )
Optimize Worldwide Find Content IDsWordPress Find Content IDs plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
7.1
EPSS
0.04%
First published (updated )
MagicFormThe MagicForm plugin for WordPress is vulnerable to access and modification of data due to a missing…
6.3
First published (updated )
ELEX WordPress HelpDesk & Customer Ticketing SystemThe ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privil…
8.8
First published (updated )
Live2DThe Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficien…
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.