Filter
-Infinity
0

BleepingComputerMalware campaign 'DollyWay' breached 20,000 WordPress sites

First published (updated )

WordPresspixelstats <= 0.8.2 - Reflected Cross-Site Scripting

First published (updated )

Directory Listings uListingDirectory Listings WordPress plugin – uListing <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection

8.8
First published (updated )

ZipList RecipeWordPress ZipList Recipe plugin <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability

8.8
EPSS
0.02%
First published (updated )

WordPressWordPress wordpress login form to anywhere plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability

EPSS
0.04%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Golo City Travel GuideGolo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change

First published (updated )

InWave JobsInWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset

First published (updated )

WordPressWordPress WP Journal plugin <= 1.1 - Broken Access Control vulnerability

First published (updated )

WP FixTagWordPress WP FixTag plugin <= v2.0.2 - Cross Site Scripting (XSS) vulnerability

7.1
First published (updated )

WordPressWordPress rng-refresh plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

7.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WordPressWordPress WP FPO plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

7.1
First published (updated )

VW Themes IbtanaWordPress Ibtana – WordPress Website Builder plugin <= 1.2.4.9 - Stored Cross Site Scripting (XSS) vulnerability

EPSS
0.03%
First published (updated )

NextGEN GalleryNextGEN Gallery < 3.59.9 - Admin+ Stored XSS

3.5
First published (updated )

FULL SERVICES FULL CustomerWordPress FULL – Cliente plugin <= 3.1.26 - Local File Inclusion vulnerability

7.5
EPSS
0.11%
First published (updated )

ZiggeoZiggeo <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

The Events CalendarEvents Calendar Made Simple – Pie Calendar <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piecal Shortcode

First published (updated )

Categorized Gallery PluginCategorized Gallery Plugin <= 2.0 - Authenticated (Contributor+) SQL Injection

First published (updated )

UMich OIDC LoginUMich OIDC Login <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

First published (updated )

WordPressCoaching Staffs <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

First published (updated )

PressMart Modern Elementor WooCommerce WordPress ThemePressMart - Modern Elementor WooCommerce WordPress Theme <= 1.2.16 - Unauthenticated Arbitrary Shortcode Execution

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WordPressWordPress Admin Options Pages plugin <= 0.9.7 - Reflected Cross Site Scripting (XSS) vulnerability

7.1
EPSS
0.04%
First published (updated )

Ariagle WP-ClapWordPress WP-Clap plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

7.1
EPSS
0.04%
First published (updated )

wjharil AdsMiddleWordPress AdsMiddle plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

7.1
EPSS
0.04%
First published (updated )

AForms EatsAForms Eats <= 1.3.1 - Unauthenticated Full Path Disclosure

First published (updated )

WordPressWordPress Link to URL / Post plugin <=1.3 - SQL Injection vulnerability

7.6
EPSS
0.04%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WordPressWordPress WP Admin Custom Page plugin <= 1.5.0 - CSRF to Stored XSS vulnerability

7.1
EPSS
0.04%
First published (updated )

Optimize Worldwide Find Content IDsWordPress Find Content IDs plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

7.1
EPSS
0.04%
First published (updated )

MagicFormThe MagicForm plugin for WordPress is vulnerable to access and modification of data due to a missing…

First published (updated )

ELEX WordPress HelpDesk & Customer Ticketing SystemThe ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privil…

8.8
First published (updated )

Live2DThe Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficien…

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203