Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions....
Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions....
Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions....
Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions....
Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions....
Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions....
Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions....
Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions....
Subscriber Cross Site Scripting (XSS) in Slider Pro <= 4.8.13 versions....
Contributor Arbitrary File Deletion in Picture Gallery <= 1.6.5 versions....
Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery. This issue affects MailPoet: from 5.30.0 through 5.33.0....
Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions....
Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions....
Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions....
Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions....
Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions....
Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions....
Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions....
Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 versions....
Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions....
Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions....
Missing Authorization vulnerability in bPlugins YT Player yt-player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YT Player: from n/a through 2.1.2....
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions....
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from n/a through 1.36.3....