Filter
-Infinity
0
Trending
Software
wordpress
703
wordpress wplms plugin
13
wordpress import and export users and customers
8
wordpress xstore
8
wordpress armember
6
wordpress ltl freight quotes plugin
6
wordpress qr code and barcode scanner reader
6
wordpress ai engine
5
wordpress ba book everything plugin
5
wordpress bear plugin
5
wordpress booking calendar
5
wordpress gallery plugin
5
wordpress salon booking system plugin
5
wordpress small package quotes plugin
5
wordpress academy lms plugin
4
wordpress exclusive addons for elementor
4
wordpress file manager
4
wordpress modal window
4
wordpress move addons for elementor
4
wordpress newsletters
4
wordpress podlove podcast publisher
4
wordpress wp fast total search
4
wordpress 1003 mortgage application plugin
3
wordpress accept stripe payments
3
wordpress admin
3
wordpress ajax contact form
3
wordpress buddyforms
3
wordpress calculated fields form
3
wordpress captcha
3
wordpress contact form email
3
wordpress iframe to embed plugin
3
wordpress jupiter x core
3
wordpress la-studio element kit for elementor
3
wordpress listingpro
3
wordpress newsletter popup
3
wordpress olive one click demo import
3
wordpress one click demo import
3
wordpress portfolio gallery
3
wordpress product designer
3
wordpress smart online order for clover
3
wordpress sunshine photo cart
3
wordpress videowhisper live streaming integration plugin
3
wordpress 12 step meeting list
2
wordpress accordion
2
wordpress activedemand plugin
2
wordpress admin and site enhancements (ase) pro plugin
2
wordpress advanced access manager
2
wordpress advanced search
2
wordpress advanced sermons
2
wordpress ai responsive gallery album
2
BleepingComputerMalware campaign 'DollyWay' breached 20,000 WordPress sites
First published (updated )
News
BleepingComputercookforweb All In MenuWordPress All In Menu Plugin <= 1.1.5 - SQL Injection vulnerability
8.5
EPSS
0.04%
First published (updated )
WordPress FS PosterWordPress FS Poster plugin <= 6.5.8 - SQL Injection vulnerability
8.5
EPSS
0.03%
First published (updated )
Aldo Latino PrivateContentWordPress PrivateContent plugin <= 8.11.5 - Subscriber+ Site Wide Broken Access Control vulnerability
8.3
EPSS
0.03%
First published (updated )
Fresh FrameworkWordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Broken Access Control vulnerability
8.6
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress PrivateContentWordPress PrivateContent plugin <= 8.11.5 - Reflected Cross Site Scripting (XSS) vulnerability
7.1
EPSS
0.04%
First published (updated )
Aldo Latino PrivateContentWordPress PrivateContent plugin <= 8.11.4 - SQL Injection vulnerability
8.5
EPSS
0.03%
First published (updated )
MagePeople Booking and Rental ManagerWordPress Booking and Rental Manager Plugin <= 2.2.6 - PHP Object Injection vulnerability
8.8
EPSS
0.05%
First published (updated )
NotFound Ohio Ohio ExtraWordPress Ohio Theme Extra plugin <= 3.4.7 - Shortcode Injection vulnerability
6.5
EPSS
0.05%
First published (updated )
WordPress m1.DownloadListWordPress m1.DownloadList plugin <= 0.19 - Cross Site Scripting (XSS) vulnerability
6.5
EPSS
0.03%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Pie RegisterWordPress Pie Register Premium plugin <= 3.8.3.2 - Path Traversal to Non-Arbitrary File Deletion vulnerability
6.3
EPSS
0.05%
First published (updated )
NotFound Debug-Bar-ExtenderWordPress Debug-Bar-Extender Plugin <= 0.5 - Reflected Cross Site Scripting (XSS) vulnerability
7.1
EPSS
0.04%
First published (updated )
Silverplugins Multiple Shipping And Billing Address For WoocommerceWordPress Multiple Shipping And Billing Address For Woocommerce Plugin <= 1.3 - SQL Injection vulnerability
9.3
EPSS
0.04%
First published (updated )
WordPress WP AntiDDOSWordPress WP AntiDDOS Plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
7.1
EPSS
0.04%
First published (updated )
PublishPress AuthorsWordPress PublishPress Authors plugin <= 4.7.3 - SQL Injection vulnerability
7.6
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress Random Posts, Mp3 Player + ShareButtonWordPress Random Posts, Mp3 Player + ShareButton plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability
7.1
First published (updated )
NotFound Random Image SelectorWordPress Random Image Selector plugin <= 1.5.6 - Reflected Cross-Site Scripting vulnerability
7.1
EPSS
0.04%
First published (updated )
Spring Devs Pre Order Addon for WooCommerce – Advance Order/Backorder PluginWordPress Pre Order Addon for WooCommerce plugin<= 1.0.7 - Reflected Cross-Site Scripting
7.1
EPSS
0.04%
First published (updated )
WP Discord PostWordPress WP Discord Post Plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
7.1
EPSS
0.04%
First published (updated )
Traveler ThemeTraveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_post
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPresspixelstats <= 0.8.2 - Reflected Cross-Site Scripting
6.1
First published (updated )
WordPress Portfolio and ProjectsPortfolio and Projects <= 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.9
First published (updated )
Directory Listings uListingDirectory Listings WordPress plugin – uListing <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection
8.8
First published (updated )
WordPress WPCOM MemberWPCOM Member <= 1.7.6 - Unauthenticated Time-Based SQL Injection
7.5
First published (updated )
WP-DownloadManagerDownload Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwrite
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress Report Brute Force Attacks and Login Protection ReportAttacks PluginsWordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins <= 2.32 - Authenticated (Admin+) SQL Injection
4.9
First published (updated )
WordPress Review SchemaReview Schema <= 2.2.4 - Authenticated (Contributor+) Local File Inclusion via Post Meta
8.8
First published (updated )
ZipList RecipeWordPress ZipList Recipe plugin <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability
8.8
EPSS
0.02%
First published (updated )
WordPress DP ALTerminator - Missing ALT managerWordPress DP ALTerminator - Missing ALT manager Plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
5.9
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.