Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions....
Universal Security Vulnerabilities & CVE Catalog
Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions....
Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions....
Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions....
Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions....
Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions....
Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions....
Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions....
Subscriber Cross Site Scripting (XSS) in Slider Pro <= 4.8.13 versions....
Contributor Arbitrary File Deletion in Picture Gallery <= 1.6.5 versions....
Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery. This issue affects MailPoet: from 5.30.0 through 5.33.0....
Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions....
Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions....
Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions....
Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions....
Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions....
Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions....
Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions....
Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 versions....
Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions....
Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions....
Missing Authorization vulnerability in bPlugins YT Player yt-player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YT Player: from n/a through 2.1.2....
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions....
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from n/a through 1.36.3....