Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions....
Universal Security Vulnerabilities & CVE Catalog
Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions....
Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions....
Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions....
Editor Arbitrary File Deletion in Kirki <= 6.0.13 versions....
Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions....
Subscriber Sensitive Data Exposure in ะฎKassa ะดะปั WooCommerce <= 2.16.1 versions....
Subscriber Broken Access Control in RT Mega Menu โ Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions....
Subscriber Broken Access Control in FundEngine <= 1.7.8 versions....
Subscriber Cross Site Scripting (XSS) in RT Mega Menu โ Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions....
Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions....
Unauthenticated Broken Access Control in Events Made Easy <= 3.1.3 versions....
Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 versions....
Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions....
Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer & Embedder <= 1.4.2 versions....
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions....
Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions....
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions....
Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions....
Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions....
Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions....
Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions....
Administrator SQL Injection in Sender โ Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions....
Unauthenticated Broken Access Control in CoCart โ Headless ecommerce <= 4.8.4 versions....