See how wordpress compares to other vendors in security performance
The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, allowing unauthenticated users to update and delete arbitrary WordPress options, which can be used to gain administrator access to the site.
Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.
Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.
Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.
Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.
Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.
Subscriber Privilege Escalation in AIWU <= 1.5.9 versions.
Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.
Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.
Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions.
Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.
Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.
Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.
Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.
Unauthenticated PHP Object Injection in Juno <= 2.25 versions.
Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.
Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.
Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.
Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.
Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.
Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.
Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.
Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.
Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.
Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.
Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.