Filter
-Infinity
0
Trending
WPMU DEV HummingbirdWordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability
8.8
First published (updated )
Forminator FormsForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated (Contributor+) Form Update and Creation
8.8
First published (updated )
WPMU DEV Defender SecurityWordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data Exposure
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Smush Image Compression and OptimizationPath Traversal
7.5
First published (updated )
WPMU DEV SmartCrawlSmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post Disclosure
7.5
EPSS
0.08%
First published (updated )
WPMU DEV BrandaBranda – White Label WordPress, Custom Login Page Customizer <= 3.4.17 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
6.4
EPSS
0.05%
First published (updated )
Broken Link CheckerBroken Link Checker Plugin ui_get_action_links cross site scripting
6.1
First published (updated )
Smush Image Compression and OptimizationSmush < 3.9.9 - Admin+ Reflected Cross-Site Scripting
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Broken Link CheckerWordPress Broken Link Checker plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability
5.9
EPSS
0.04%
First published (updated )
WPMU DEV BrandaWordPress Branda plugin <= 3.4.17 - Cross Site Scripting (XSS) vulnerability
5.9
First published (updated )
WPMU DEV BrandaBranda – White Label WordPress, Custom Login Page Customizer <= 3.4.18 - Unauthenticated Full Path Disclosure
5.3
EPSS
0.05%
First published (updated )
Forminator FormsForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.36.0 - Insecure Direct Object Reference to Submission Manipulation
5.3
EPSS
0.04%
First published (updated )
WPMU DEV Defender SecurityDefender Security < 4.1.0 - Protection Bypass (Hidden Login Page)
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Forminator FormsForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Quiz Creation
4.3
EPSS
0.05%
First published (updated )
Forminator FormsForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Custom Form Creation
4.3
EPSS
0.05%
First published (updated )