Filter
-Infinity
0

WordPressWordPress AR For WordPress plugin <= 6.2 - Arbitrary File Upload vulnerability

First published (updated )

WordPressMultiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack…

First published (updated )

WpstorecartUnrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for…

First published (updated )

WordPressUnspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impac…

First published (updated )

WordPressXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Rbx GalleryUnrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress a…

First published (updated )

Zingiri Web ShopMultiple unspecified vulnerabilities in the Zingiri Web Shop plugin before 2.4.0 for WordPress have …

First published (updated )

Another Wordpress Classifieds PluginUnspecified vulnerability in the Another WordPress Classifieds Plugin before 2.0 for WordPress has u…

First published (updated )

WordPressUnspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and…

First published (updated )

WordPressUnspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WordPressWordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-…

First published (updated )

IBM ConnectionsUnspecified vulnerability in the Connections plugin before 0.7.1.6 for WordPress has unknown impact …

First published (updated )

WordPresswp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the applicatio…

First published (updated )

Debian LinuxOS Command Injection

First published (updated )

WordPressWordPress CubeWP plugin <= 1.1.12 - Arbitrary File Upload vulnerability

EPSS
0.04%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WordPressWordPress ProductX – Gutenberg WooCommerce Blocks Plugin <= 3.1.4 is vulnerable to PHP Object Injection

EPSS
0.04%
First published (updated )

Piraeus Bank WooCommerce Payment GatewaySQL Injection

First published (updated )

Simple Job BoardThe Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up t…

First published (updated )

WordPress简数采集器 (Keydatas) <= 2.5.2 - Unauthenticated Arbitrary File Upload

EPSS
0.09%
First published (updated )

WordPressWPCOM Member <= 1.5.2.1 - Unauthenticated Privilege Escalation via User Meta

EPSS
0.09%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WordPressWordPress Meetup plugin <= 0.1 - Broken Authentication vulnerability

First published (updated )

WordPressWordPress Blogpoet theme <= 1.0.3 - Broken Access Control vulnerability

First published (updated )

PressMart Modern Elementor WooCommerce WordPress ThemePressMart - Modern Elementor WooCommerce WordPress Theme <= 1.2.16 - Unauthenticated Arbitrary Shortcode Execution

First published (updated )

InWave JobsInWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset

First published (updated )

Golo City Travel GuideGolo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WordPressObject injection via local phar file

First published (updated )

composer/phpmailer/phpmailerCommand Injection

First published (updated )

composer/phpmailer/phpmailerCommand Injection

First published (updated )

WordPressInsecure Deserialization of untrusted data in rmccue/requests

First published (updated )

Debian LinuxInput Validation

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203